Frameworks / Security / Profiles

SecurityProfileUnited States

SOC 2 Readiness

Included in Information Security · Anchored on ISO/IEC 27001 · Incorporates ISO/IEC 27002, NIST CSF 2.0, SOC 2 (AICPA TSC), CIS Controls, PCI DSS, ISO/IEC 27017, ISO/IEC 27018

Readiness controls across the five Trust Services Criteria, so you enter a SOC 2 examination with evidence already in place.

The standard tells you what is required; the framework tells you how to do it, whether you've done enough to certify, and how to keep getting better.

Included in

Security · topic framework

Information Security

Information Security incorporates SOC 2 (AICPA TSC) as a Secondary standard, where the Primary leaves gaps; the profile shows the controls that cite it.

Anchored on ISO/IEC 27001 · Incorporates ISO/IEC 27002, NIST CSF 2.0, SOC 2 (AICPA TSC), CIS Controls, PCI DSS, ISO/IEC 27017, ISO/IEC 27018

A profile isn't sold on its own: it comes with the topic framework, in the Core and Professional editions. In APEX, it is the Certification view filtered to SOC 2 (AICPA TSC).

Need to govern against SOC 2 (AICPA TSC)?

Tell us where your programme is today and we'll point you to the right framework and edition.

Enquire about Information Security

Standards are referenced by clause, not reproduced. Names of standards and laws are trademarks of their owners; DP Frameworks is not affiliated with or endorsed by any standards body or regulator. Frameworks support governance and readiness; they are not legal advice or a regulatory submission.