soc2-compliance
Use when the user asks to prepare for SOC 2 audits, map Trust Service Criteria, build control matrices, collect audit evidence, perform gap analysis, or assess SOC 2 Type I vs Type II readiness.
Profile →npx skills add alirezarezvani/claude-skills --skill soc2-compliance --agent claude-code
Same command for any agent — swap --agent for codex, cursor, copilot.
Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.
# SOC 2 Compliance SOC 2 Type I and Type II compliance preparation for SaaS companies. Covers Trust Service Criteria mapping, control matrix generation, evidence collection, gap analysis, and audit readiness assessment. ## Table of Contents - [Overview](#overview) - [Trust Service Criteria](#trust-service-criteria) - [Control Matrix Generation](#control-matrix-generation) - [Gap Analysis Workflow](#gap-analysis-workflow) - [Evidence Collection](#evidence-collection) - [Audit Readiness Checklist](#audit-readiness-checklist) - [Vendor Management](#vendor-management) - [Continuous Compliance](#continuous-compliance) - [Anti-Patterns](#anti-patterns) - [Tools](#tools) - [References](#references) - [Cross-References](#cross-references) --- ## Overview ### What Is SOC 2? SOC 2 (System and Organization Controls 2) is an auditing framework developed by the AICPA that evaluates how a service organization manages customer data. It applies to any technology company that stores, processes, or transmits customer information — primarily SaaS, cloud infrastructure, and managed service providers. ### Type I vs Type II | Aspect | Type I | Type II | |--------|--------|---------| | **Scope** | Design
- Table of Contents
- Overview
- What Is SOC 2?
- Type I vs Type II
- Who Needs SOC 2?
- Typical Journey
- Trust Service Criteria
- Security (Common Criteria CC1-CC9) — Required
- Availability (A1) — Optional
- Confidentiality (C1) — Optional
- Processing Integrity (PI1) — Optional
- Privacy (P1-P8) — Optional
- Control Matrix Generation
- Matrix Structure
Generate full security matrix in markdown python scripts/control_matrix_builder.py --categories security --format md Generate matrix for multiple categories as JSON python scripts/control_matrix_builder.py --categories security,availability,confidentiality --format json All categories, CSV output python scripts/control_matrix_builder.py --categories security,availability,confidentiality,processing-integrity,privacy --format csv Check evidence status from a control matrix python scripts/evidence_tracker.py --matrix controls.json --status JSON output for integration python scripts/evidence_tracker.py --matrix controls.json --status --json
What does the soc2-compliance skill do?
Use when the user asks to prepare for SOC 2 audits, map Trust Service Criteria, build control matrices, collect audit evidence, perform gap analysis, or assess SOC 2 Type I vs Type II readiness.
How do I install it?
Run `npx skills add alirezarezvani/claude-skills --skill soc2-compliance --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.
Where does this skill come from?
From alirezarezvani/claude-skills, a repository with 23,791 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.
Is a popular skill a good skill?
Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.