Afrexai Soc2 Compliance

# SOC 2 Compliance Accelerator

Your agent for achieving and maintaining SOC 2 Type I and Type II compliance — from readiness assessment through audit completion.

## What This Does

Guides organizations through the full SOC 2 lifecycle: gap analysis, control implementation, evidence collection, audit prep, and continuous monitoring. Covers all 5 Trust Service Criteria with practical implementation steps.

## How to Use

Tell your agent what stage you're at:

- **"Run SOC 2 readiness assessment"** — 64-point gap analysis across all Trust Service Criteria
- **"Build SOC 2 control matrix"** — Maps controls to criteria with ownership and evidence requirements
- **"Create SOC 2 evidence collection plan"** — Automated and manual evidence gathering schedule
- **"Prepare for SOC 2 audit"** — Auditor-ready documentation package checklist
- **"SOC 2 continuous monitoring dashboard"** — Ongoing compliance tracking after certification

## Trust Service Criteria Coverage

### CC — Common Criteria (Security) — Required
- CC1: Control Environment (tone at top, org structure, accountability)
- CC2: Communication & Information (internal/external, system boundaries)
- CC3: Risk Assessment (risk identification, fraud risk, change impact)
- CC4: Monitoring Activities (ongoing evaluations, deficiency reporting)
- CC5: Control Activities (policies, technology controls, deployment)
- CC6: Logical & Physical Access (access management, authentication, physical security)
- CC7: System Operations (vulnerability management, incident response, recovery)
- CC8: Change Management (change authorization, testing, approval)
- CC9: Risk Mitigation (vendor management, business continuity)

### Optional Criteria
- **Availability (A1)**: Uptime SLAs, DR/BCP, capacity planning
- **Processing Integrity (PI1)**: Data accuracy, completeness, timeliness
- **Confidentiality (C1)**: Classification, encryption, retention, disposal
- **Privacy (P1)**: Notice, consent, collection, use, disclosure, access

## Rea...

# SOC 2 Compliance Accelerator

Complete SOC 2 Type I and Type II compliance framework for AI-powered organizations. From readiness assessment to audit completion.

## Features

- **64-point readiness assessment** across all 5 Trust Service Criteria
- **Control implementation priorities** — what to build first, second, third
- **Evidence collection guide** — automated + manual evidence mapping
- **Audit timeline templates** — Type I (8-12 weeks) and Type II (3-12 months)
- **Cost framework** by company size ($20K-$300K range)
- **AI agent considerations** — SOC 2 controls specific to agent deployments
- **Industry crosswalks** — Fintech, Healthcare, SaaS, Legal, E-commerce, Construction
- **7 common mistakes** that delay certification by 6+ months

## Who This Is For

- CTOs and engineering leaders preparing for first SOC 2 audit
- Compliance teams transitioning from Type I to Type II
- Startups where SOC 2 is blocking enterprise deals
- Companies deploying AI agents that need compliance coverage

## Quick Start

Install this skill, then ask your agent:

```
"Run SOC 2 readiness assessment for our SaaS platform"
"Build control matrix for Type II audit"
"What evidence do we need for CC6 (access controls)?"
"Create 90-day SOC 2 certification timeline"
```

## Related Resources

- [AfrexAI Context Packs](https://afrexai-cto.github.io/context-packs/) — Industry-specific compliance playbooks ($47/pack)
- [AI Revenue Leak Calculator](https://afrexai-cto.github.io/ai-revenue-calculator/) — Find where compliance gaps cost revenue
- [Agent Setup Wizard](https://afrexai-cto.github.io/agent-setup/) — Deploy compliance monitoring agents

**Bundle deals:** Pick 3 ($97) | All 10 ($197) | Everything ($247)

---

Built by [AfrexAI](https://afrexai-cto.github.io/context-packs/) — AI context packs that actually work.