# Soc2 Compliance

> Implement SOC 2 Trust Services Criteria. Configure security, availability, and processing integrity controls. Use when achieving SOC 2 certification.

- Skill: `majiayu000/soc2-compliance` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds add majiayu000/soc2-compliance`
- Raw SKILL.md: https://api.skillmd.com/api/skills/majiayu000/soc2-compliance/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- License: MIT
- Author: majiayu000 (https://skillmd.com/u/majiayu000)
- Updated: 2026-09-09
- Page: https://skillmd.com/skills/majiayu000/soc2-compliance

---


# SOC 2 Compliance

Implement SOC 2 Trust Services Criteria for certification.

## Trust Services Criteria

```yaml
criteria:
  security:
    - Access controls
    - Change management
    - Risk assessment
    - Incident response
    
  availability:
    - System monitoring
    - Disaster recovery
    - Capacity planning
    - SLA management
    
  processing_integrity:
    - Input validation
    - Processing completeness
    - Output accuracy
    
  confidentiality:
    - Data classification
    - Encryption
    - Access restrictions
    
  privacy:
    - Data collection notice
    - Consent management
    - Data retention
```

## Key Controls

```yaml
controls:
  CC6.1_logical_access:
    - MFA enforcement
    - Role-based access
    - Access reviews
    
  CC7.2_monitoring:
    - Log aggregation
    - Alert thresholds
    - Incident tracking
    
  CC8.1_change_management:
    - Change requests
    - Approval workflows
    - Testing requirements
```

## Evidence Collection

```bash
# Access review export
aws iam generate-credential-report
aws iam get-credential-report

# Audit logs
aws cloudtrail lookup-events --start-time $(date -d '30 days ago' --iso)
```

## Best Practices

- Continuous compliance monitoring
- Annual risk assessments
- Regular control testing
- Documentation maintenance