Security & compliance
Is SOC 2 a certification?
No. A SOC 2 report is an attestation issued by an independent CPA firm after an audit. TenacIT is not a CPA firm; we get you ready for the audit and run the controls the auditor tests.
No, although almost everyone calls it one. A SOC 2 report is an attestation issued by an independent CPA firm after it audits your controls against the AICPA’s Trust Services Criteria.
- A Type I report looks at whether your controls are designed properly at a single point in time.
- A Type II report tests whether they actually operated over a period, usually several months to a year. Most large customers ask for Type II.
TenacIT is not a CPA firm and does not issue SOC reports. Our part is everything before and around the audit: closing the gaps, running the controls and collecting the evidence the auditor will test. See SOC 2 readiness.
Thirty minutes, and you will know where you stand.
No obligation, no pitch deck. We will tell you what we would do and what the ceiling would be. If that is not worth it, you have lost half an hour.