Skip to content
Reliability, security & resilience · Working

SOC 2

Also called: System and Organization Controls 2

ELI5

An independent report on how a service organisation controls certain risks.

Used in conversation

“SOC 2 is an attestation report, not a permanent security guarantee.”

Definition

An attestation framework reporting on controls relevant to security, availability and other trust-service criteria.

Here “SOC 2” means: An attestation framework reporting on controls relevant to security, availability and other trust-service criteria.

Pitch context

You will see “SOC 2” in product strategy decks, roadmaps, experiments and architecture reviews when the discussion reaches reliability, security & resilience.

Why it matters: In reliability, security & resilience, the scope can change what data may be used, who may access it and which controls are required.

When the words have to travel

Need an investor or company deck?

Bring the business, the evidence or the half-formed ask. We help it travel beyond the spreadsheet.

See how pitch.dog can help
Sources & evidence · 2

Direct term-level sources and supporting source families.