Soc2

If you're facing a SOC 2 audit or a customer just asked for your security report, this skill walks you through the AICPA Trust Services Criteria with the precision of someone who's done this before. It covers gap analysis, policy templates, control documentation, and evidence prep across all five TSC categories (Security is mandatory, the others optional). The skill includes specific control matrices, policy templates, and evidence catalogs organized by criterion code (CC1 through CC9, plus A1, C1, PI1, P1-P8). It's built for any maturity level, from startups getting audited for the first time to teams maintaining annual compliance. Practical and detailed enough to actually use during prep.