What is SOC 2?
SOC 2 is an attestation, based on the AICPA Trust Services Criteria, that evaluates how a service organisation manages data across Security, Availability, Processing Integrity, Confidentiality, and Privacy. A Type I report assesses control design at a point in time; Type II assesses operating effectiveness over a period (typically 3–12 months).
CyberAlpha runs the readiness programme — scoping, gap assessment, control implementation, and evidence — then supports you through the CPA audit so the report lands without surprises.
Why SOC 2?
Our Engagement Process
What You Get
Who Needs It
SaaS providers, cloud and managed-service companies, and any vendor handling customer data for enterprise clients.
See related servicesReady to get SOC 2 done?
Talk to a specialist about scope, timeline, and a fixed proposal.
Talk to an ExpertFrequently Asked Questions
Type I or Type II — which do we need?
Type I proves your controls are well-designed at a point in time and is faster to obtain; Type II proves they operate effectively over a window and is what most enterprise buyers ultimately want. Many start with Type I, then move to Type II.
Do you perform the audit?
The SOC 2 attestation must be issued by a licensed CPA firm. We deliver readiness and advisory, and work alongside your chosen auditor through the engagement.
How long does it take?
Readiness typically takes a few weeks to a couple of months depending on your starting maturity. A Type II observation window then runs for the agreed period.