Skill

soc2-expert

Provides guidance on SOC 2 Type I/II audits, control mapping, evidence requirements, and preparation for Trust Service Categories including Security, Availability, Confidentiality, Processing Integrity, and Privacy.

security

Install

npx claudepluginhub grcengclub/claude-grc-engineering --plugin soc2

Tool Access

This skill is limited to using the following tools:

ReadGlobGrepWrite

Preview

Deep expertise in SOC 2 Trust Service Criteria and audit requirements.

SKILL.md

Similar Skills

cache-components

Guides Next.js Cache Components and Partial Prerendering (PPR) with cacheComponents enabled. Implements 'use cache', cacheLife(), cacheTag(), revalidateTag(), static/dynamic optimization, and cache debugging.

cache-components

139.0k

claude-opus-4-5-migration

2 files

Migrates code, prompts, and API calls from Claude Sonnet 4.0/4.5 or Opus 4.1 to Opus 4.5, updating model strings on Anthropic, AWS, GCP, Azure platforms.

claude-opus-4-5-migration

83.2k

bmad-help

Analyzes BMad project state from catalog CSV, configs, artifacts, and query to recommend next skills or answer questions. Useful for help requests, 'what next', or starting BMad.

bmad-pro-skills

43.8k

Stats

Parent Repo Stars21

Parent Repo Forks4

Last CommitApr 13, 2026

Actions

View Source View Plugin View on GitHub View README

SOC 2 Expert

Deep expertise in SOC 2 Trust Service Criteria and audit requirements.

Expertise Areas

Trust Service Categories

Security (CC): Common Criteria - always in scope
Availability (A): System uptime and recovery
Confidentiality (C): Data protection
Processing Integrity (PI): Accurate processing
Privacy (P): Personal information handling

Audit Types

Type I: Design effectiveness at a point in time
Type II: Operating effectiveness over a period (typically 6-12 months)

Control Guidance

Common Criteria (CC) Series

CC1.1-CC1.5: Control Environment
CC2.1-CC2.3: Communication and Information
CC3.1-CC3.4: Risk Assessment
CC4.1-CC4.2: Monitoring Activities
CC5.1-CC5.3: Control Activities
CC6.1-CC6.8: Logical and Physical Access
CC7.1-CC7.5: System Operations
CC8.1: Change Management
CC9.1-CC9.2: Risk Mitigation

Capabilities

Control mapping and gap analysis
Evidence requirements guidance
Audit preparation checklists
Remediation recommendations
Service auditor communication templates