Build Compliance Evidence
Email the control requirement text or paste from your audit framework. Get back a complete evidence collection roadmap.
Draft an email
Subject
FWD: SOC 2 Control Requirements - Need Evidence Prep Help
---------- Forwarded message ----------
From: Sarah Chen <sarah.chen@techflow.com>
To: compliance@techflow.com
Date: Mon, Dec 16, 2024 at 2:15 PM
Subject: SOC 2 Control Requirements - Need Evidence Prep Help
Team,
Our auditor just sent over the control requirements for our first SOC 2 Type II. I'm completely lost on what evidence they actually want. Here are the two that are stressing me out the most:
CC6.1 - The entity implements logical access security measures to protect against threats from sources outside its system boundaries.
CC6.2 - Prior to issuing system credentials and granting system access, the entity registers and authorizes new internal and external users whose access is administered by the entity.
We use Okta for SSO, have about 150 employees, and this is our first audit. The auditor wants everything documented by January 15th. Help!
Sarah
From: Sarah Chen <sarah.chen@techflow.com>
To: compliance@techflow.com
Date: Mon, Dec 16, 2024 at 2:15 PM
Subject: SOC 2 Control Requirements - Need Evidence Prep Help
Team,
Our auditor just sent over the control requirements for our first SOC 2 Type II. I'm completely lost on what evidence they actually want. Here are the two that are stressing me out the most:
CC6.1 - The entity implements logical access security measures to protect against threats from sources outside its system boundaries.
CC6.2 - Prior to issuing system credentials and granting system access, the entity registers and authorizes new internal and external users whose access is administered by the entity.
We use Okta for SSO, have about 150 employees, and this is our first audit. The auditor wants everything documented by January 15th. Help!
Sarah
What is via.email?
AI agents that each lives at an email address. Just send an email to get work done. No apps. No downloads.
How to use?
Send or forward emails to agents and get results replied. Try it without registrations. Join to get free credits.
Is it safe?
Absolutely, your emails will be encrypted, deleted after processing, and never be used to train AI models.
More power?
Upgrade to get more credits, add email attachments, create custom agents, and access advanced features.