A tailored course, built for your situation
Own the SOC 2 narrative end to end
From execution to ownership in your current role
$199 one-time
24-hour access provisioning
30-day money-back guarantee
Hand-built implementation playbook
12 modules. 12 chapters per module. 144 chapters total.
12 modules, each with 12 chapters (144 chapters total), text-based, plus downloadable templates and a hand-built implementation playbook delivered alongside course access.
Stuck in delivery without ownership of the compliance story
The situation this course is for
High-performing individuals often execute critical SOC 2 work but remain excluded from narrative control, the decisions that define scope, evidence flow, and final reporting. This gap limits visibility and slows recognition, even when delivery is flawless.
Who this is for
IC at a global services firm, delivering compliance-adjacent work in Salesforce environments with growing responsibility but not full ownership of the audit lifecycle
Who this is not for
Those looking to transition into compliance from another function, or practitioners outside service delivery roles with no exposure to control frameworks
What you walk away with
- Define and defend SOC 2 scope without escalation
- Direct evidence collection across technical teams with confidence
- Finalise the SoA with input authority, not just review access
- Lead internal prep cycles for Type I and Type II audits
- Document a repeatable playbook that anchors future engagements
The 12 modules (with all 144 chapters)
Module 1. Framing the SOC 2 engagement
Understand how scope decisions today shape audit outcomes tomorrow. Learn to align control objectives with operational reality in client-facing projects.
12 chapters in this module
- Purpose of SOC 2 beyond compliance
- Types of engagements Type I vs Type II
- Role of service org vs user entity
- Trust services criteria breakdown
- Mapping client needs to scope
- When to involve legal or security
- Defining system boundaries
- Identifying subservice orgs
- Common boundary pitfalls
- Internal documentation standards
- Stakeholder alignment points
- First draft of system description
Module 2. Control ownership fundamentals
Shift from support to ownership by mastering the language and logic of control design.
12 chapters in this module
- What makes a control testable
- Designing for operating effectiveness
- Control objectives vs activities
- Common criteria pairings
- Leveraging prewritten policies
- Customising control language
- Ownership markers in documentation
- Version control practices
- Change management triggers
- Control hierarchy design
- Linking controls to risks
- Audit trail expectations
Module 3. Evidence collection planning
Build a structured, repeatable process for gathering technical and operational evidence across teams.
12 chapters in this module
- Evidence types by criterion
- Sampling strategies defined
- Timeline for collection cycles
- Assigning evidence owners
- Follow-up escalation paths
- Tooling for tracking status
- Common Salesforce gaps
- Integration point controls
- User access review evidence
- Change management logs
- Incident response documentation
- Preparing for surprise requests
Module 4. Writing the system description
Craft a clear, defensible narrative of your system’s compliance posture.
12 chapters in this module
- Structure of the system description
- Narrative vs technical sections
- Describing Salesforce configurations
- Role of sandboxes and dev orgs
- Data flow descriptions
- Security baseline statements
- Availability controls explained
- Confidentiality boundaries
- Privacy statement alignment
- Change management narrative
- Vendor management integration
- Final sign-off workflow
Module 5. Audit prep leadership
Lead the internal cycle with confidence, reducing reliance on senior reviewers.
12 chapters in this module
- Pre-audit checklist finalisation
- Internal walkthrough facilitation
- Mock Q&A preparation
- Common auditor questions
- Response drafting standards
- Evidence packet assembly
- Version control during audit
- Tracking auditor requests
- Coordination with legal
- Handling scope changes
- Post-audit follow-up items
- Lessons learned documentation
Module 6. Stakeholder communication
Communicate progress and risks clearly to delivery and assurance teams.
12 chapters in this module
- Status reporting cadence
- Escalation protocols
- Writing for technical teams
- Summarising for leadership
- Translating auditor feedback
- Managing client expectations
- Presentation templates
- Email update standards
- Meeting agenda design
- Q&A readiness drills
- Conflict resolution language
- Documentation retention rules
Module 7. Remediation with authority
Drive fixes without waiting for external mandates.
12 chapters in this module
- Classifying finding severity
- Root cause identification
- Ownership of action plans
- Timeline negotiation
- Verification methods
- Evidence of closure
- Linking to control updates
- Change requests in Salesforce
- User access cleanup
- Policy update cycles
- Training documentation
- Audit trail closure
Module 8. Playbook development
Create a living document that compounds across engagements.
12 chapters in this module
- Template structure design
- Version control setup
- Repository naming standards
- Access control for teams
- Integration with Jira
- Linking to Salesforce orgs
- Updating after audits
- Onboarding new members
- Cross-project reuse
- Client-specific adaptations
- Security classification
- Retention and archiving
Module 9. Vendor review leadership
Take ownership of third-party compliance validation.
12 chapters in this module
- Initiating vendor assessments
- Reviewing SOC 2 reports
- Asking follow-up questions
- Documenting acceptance
- Risk scoring methodology
- Exception handling
- Communication templates
- Follow-up timing
- Internal sign-off flow
- Integration with procurement
- Salesforce-specific vendors
- Cloud service add-ons
Module 10. Internal advisory role
Become the go-to resource without formal authority.
12 chapters in this module
- Building credibility fast
- Asking strategic questions
- Offering pre-engagement input
- Documenting best practices
- Hosting brown bags
- Creating FAQs
- Feedback loops with teams
- Metrics for influence
- Tracking advisory impact
- Recognition pathways
- Mentorship opportunities
- Cross-functional visibility
Module 11. Continuous control monitoring
Shift from point-in-time to ongoing assurance.
12 chapters in this module
- Automated evidence triggers
- Salesforce report scheduling
- User access review automation
- Change detection alerts
- Log retention checks
- Integration with CI/CD
- Monthly control checks
- Quarterly review cycles
- Updating control tests
- Alert response workflows
- Documentation updates
- Stakeholder notifications
Module 12. Scaling your model
Replicate success across projects and teams.
12 chapters in this module
- Identifying replication candidates
- Adapting playbooks
- Training others
- Documenting lessons
- Measuring efficiency gains
- Sharing templates
- Client-specific tailoring
- Feedback integration
- Version promotion
- Leadership reporting
- Cross-team coordination
- Success story collection
How this maps to your situation
- When preparing for first SOC 2 audit
- During evidence collection phase
- After auditor feedback received
- Before renewal cycle begins
Before vs. after
Before
Executing tasks within SOC 2 projects without full ownership of scope or narrative
After
Leading the full SOC 2 lifecycle , defining scope, directing evidence, and finalising reporting , from your current role
What's included with your purchase
- 12 modules with 12 chapters each (144 chapters)
- Downloadable templates and worked examples for every module
- Hand-built implementation playbook delivered alongside course access
- 30-day money-back guarantee
Delivery and format
- Course and learning environment access provisioned within 24 hours of purchase
- Hand-built implementation playbook delivered alongside course access
Format: Text-based modules and chapters in the Art of Service learning environment, plus downloadable templates and worked examples for every chapter, plus the hand-built implementation playbook delivered alongside course access.
Time investment: Approximately 3 hours per week over 4 weeks to complete core content and build your playbook.
If nothing changes
Continuing to deliver high-quality work without proportional influence means others shape the story, set priorities, and get credit for the outcomes you enable.
How this compares to the alternatives
Unlike generic compliance courses, this is tailored to practitioners owning SOC 2 within delivery roles , not just passing audits, but leading them.
Frequently asked
Who is this course for?
ICs and associates in services firms who are involved in SOC 2 projects and want to move from task execution to narrative ownership.
How is the course structured?
12 modules, each containing 12 chapters (144 chapters total).
Will this help me transition to a compliance role?
This course is designed to expand your influence within your current role, not transition into a dedicated compliance function.
$199 one-time. Approximately 3 hours per week over 4 weeks to complete core content and build your playbook..
Within 24 hours your account in the learning environment is provisioned and the tailored implementation playbook is delivered alongside it.
30-day money-back guarantee·
144 chapters·
Hand-built playbook included·
Account access within 24 hours