ComplyKit ← All generators

📋 SOC 2 · Trust Services Criteria

SOC 2 Trust Services Criteria Mapping

Map your existing controls to all five SOC 2 Trust Services Categories (TSCs): Security (Common Criteria), Availability, Confidentiality, Processing Integrity, and Privacy. Identify gaps before your Type I or Type II audit.

42 criteria across 6 domains·All 5 TSCs mapped·~12 min·Free

1

Organisation Details

2

TSC Assessment (42 items)

Organisation & Audit Details

Organisation Name *

Website

Country / Region

Your Role

Team Size

Audit Scope

Audit Timeline

Trust Service Categories in Scope *

Security (Common Criteria) is required. Select additional TSCs your customers require.

Security (Common Criteria) — required for all SOC 2Availability — uptime/performance commitments to customersConfidentiality — protection of confidential business informationProcessing Integrity — complete, valid, accurate, timely processingPrivacy — personal information collection and use

Existing Frameworks / Standards

ISO 27001SOC 1 (SSAE 18)NIST CSFNIST 800-53CIS Controls v8HIPAA Security RuleFedRAMPPCI DSSCSA STARInternal security policy framework

Additional Context