---
title: soc2-readiness-audit
studio: compliance
stages: [scope, assess, remediate, document, certify]
status: complete
---

# SOC 2 Type II Readiness

Prepare the company for a SOC 2 Type II audit covering the Security and Availability trust services criteria. 6-month observation window begins July 1; auditor is Prescient Assurance. No PHI in scope.

## Goals

- Scope controls against Security + Availability TSC (exclude PHI/HIPAA)
- Close all critical and high findings before the observation window opens
- Document policies and control evidence in a format the auditor can consume directly
- Pass the Type II audit with no qualified opinions
