[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"doc-seo-245343-105":3,"doc-detail-245343-en":81,"detail-sidebar-cat-1-en-105":97},{"code":4,"msg":5,"data":6},0,"ok",{"site_id":7,"language":8,"slug":9,"title":10,"keywords":11,"description":12,"schema_data":13,"social_meta":74,"head_meta":76,"extra_data":78,"updated_unix":80},105,"en","soc-2-review-template-basic-advanced","SOC 2 Review Template - Basic - Advanced","","SOC 2 Review Template provides a structured workbook to support reviewing SOC 2 reports across basic and advanced assurance areas. It captures company and audit metadata, including services, data types, report type, system name, trust services categories, auditor information, examination period, and noted exceptions. The template also includes detailed sections for system description and approval, plus optional advanced assurance statements covering areas such as business continuity, incident response, human resources policies, whistleblower reporting, risk assessment, and technical controls like access authentication, encryption, change management, firewalls, monitoring, and third-party due diligence.",{"@graph":14,"@context":73},[15,34,56],{"@type":16,"itemListElement":17},"BreadcrumbList",[18,23,27,31],{"item":19,"name":20,"@type":21,"position":22},"https://docshare.wps.com","Home","ListItem",1,{"item":24,"name":25,"@type":21,"position":26},"https://docshare.wps.com/template/","Template",2,{"item":28,"name":29,"@type":21,"position":30},"https://docshare.wps.com/template/forms/","Forms",3,{"item":32,"name":10,"@type":21,"position":33},"https://docshare.wps.com/template/soc-2-review-template-basic-advanced/245343/",4,{"url":32,"name":10,"@type":35,"image":36,"author":41,"headline":10,"publisher":44,"fileFormat":47,"inLanguage":8,"description":12,"dateModified":48,"datePublished":49,"encodingFormat":47,"isAccessibleForFree":50,"interactionStatistic":51},"DigitalDocument",{"url":37,"@type":38,"width":39,"height":40},"https://docshare.wps.com/thumbnails/soc-2-review-template-basic-advanced/245343.png","ImageObject",442,249,{"name":42,"@type":43},"Rhys","Person",{"url":19,"name":45,"@type":46},"DocShare","Organization","application/pdf","2026-10-23","2026-09-12",true,{"@type":52,"interactionType":53,"userInteractionCount":55},"InteractionCounter",{"@type":54},"ViewAction",6,{"@type":57,"mainEntity":58},"FAQPage",[59,65,69],{"name":60,"@type":61,"acceptedAnswer":62},"What information does the SOC 2 Review Template Basic collect?","Question",{"text":63,"@type":64},"It collects company and audit details such as legal name, location, used services, data types, report type, system name, trust services categories, auditor information, examination period, exceptions/deviations, CSOCs, CUECs, and UERs.","Answer",{"name":66,"@type":61,"acceptedAnswer":67},"What is included in the SOC 2 Review Template Advanced section?",{"text":68,"@type":64},"It provides optional assurance statements across specified functional areas, including business continuity and disaster recovery, incident response, human resources policies, anonymous/ethics reporting, risk assessment and mitigation, and several technical and operational controls.",{"name":70,"@type":61,"acceptedAnswer":71},"How are conclusions and approvals handled in the template?",{"text":72,"@type":64},"The template includes a conclusion section and captures preparer and reviewer information with dates for sign-off.","https://schema.org",{"og:url":32,"og:type":75,"og:title":10,"og:site_name":45,"og:description":12},"article",{"robots":77,"canonical":32},"index,follow",{"doc_id":79,"site_id":7},245343,1791550962,{"code":4,"msg":82,"data":83},"success",{"doc_id":79,"user_id":84,"nickname":42,"user_avatar":85,"doc_module":22,"category_id":86,"category_name":29,"doc_title":10,"doc_description":12,"doc_content":87,"file_id":88,"file_url":89,"file_type":90,"file_size":91,"view_count":55,"is_deleted":4,"is_public":22,"is_downloadable":22,"audit_status":22,"page_count":86,"language":92,"language_code":8,"site_id":7,"html_lang":8,"table_of_contents":93,"faqs":94,"seo_title":95,"seo_description":12,"update_tm":96,"read_time":55},687207024643,"https://ap-avatar.wpscdn.com/davatar_3d24733baf745e90a7e4bdd5f77d97b2",17,"SOC 2 Review Template  \nContents  \nSOC 2 Review Template Basic......................................................................................................................................................................................2  \nSOC 2 Review Template Advanced ..............................................................................................................................................................................3  \nGuide – Where Do I Find That Information? ...............................................................................................................................................................5  \nComplementary User Entity Controls (CUECs) .......................................................................................................................................................... 15  \nUser Entity Responsibilities (UERs) ............................................................................................................................................................................ 16  \nComplementary Subservice Organizations Controls (CSOCs) ................................................................................................................................... 17  \nDisclaimer:  \nThis template is provided as a general guide for reviewing SOC 2 reports. Your company's third-party assurance requirements may have separate or additional requirements beyond what is described here. If you encounter any content or recommendations within the template, please let us know at angelika@rendercompliance.com.  \nSOC 2 Review Template Basic  \n\n| Company Details (the company that the SOC report is about) |  |\n| --- | --- |\n| 1.Company Legal Name |  |\n| 2.Company Location |  |\n| 3.What services of the company we are using |  |\n| 4.Our Data types processed or stored by company |  |\n| Audit Information |  |\n| 5.Type of report |  |\n| 6.System Name |  |\n| 7.Trust Services Categories |  |\n| 8.Auditor’s name |  |\n| 9.Auditor’s opinion |  |\n| 10.Date of Auditor’s opinion |  |\n| 11.Examination Period |  |\n| 12.Exceptions/ Deviations noted by Auditor (if any), Management Response |  |\n| 13.Complementary Subservice Organizations |  |\n| 14.Complementary Subservice Organizations Controls (CSOCs) |  |\n| 15.Complementary User Entity Controls (CUECs) |  |\n| 16.User Entity Responsibilities (UERs) |  |\n\n\n| Detailed information |  |\n| --- | --- |\n| 17.Section 3 – System description, key components (tailored to the speciﬁc services the third-party vendor is providing to your organization) |  |\n| Conclusion and Approval |  |\n| 18.Conclusion |  |\n| 19.Preparer, Date |  |\n| 20.Reviewer, Date |  |\n\nSOC 2 Review Template Advanced  \n\n| Additional Assurance in speciﬁed areas |  |\n| --- | --- |\n| This section is optional, complete this section as needed to gain additional assurance in the speciﬁed functional areas. |  |\n| Business Continuity: The Auditor has conﬁrmed through testing that Business Continuity and Disaster Recovery have been documented and are in place. Disaster recovery testing is performed annually. | Page: |\n| Incident Response: Incident detection and reporting protocols are in place. Response programs and protocols deﬁne actions for when unauthorized access to information systems or facilities is suspected or detected to include incident response andremediation. | Page: |\n| Human Resources Policies: Values and behavioral standards are communicated to personnel through policy statements and code of conduct. Employee sanction statements are documented within the code of conduct to communicate consequences for policy and code violations. Background check is performed upon hire for all employees. | Page: |\n| Anonymous Reporting/Ethics Reporting/Whistleblower Hotline: A whistleblower process is in place to facilitate reporting of unethical behaviors and fraudulent activities that become known to an employee. | Page: |\n| Risk Assessment and Mitigation Controls: Formal proce","cbCaidnmuNxWVb4S","https://ap.wps.com/l/cbCaidnmuNxWVb4S","pdf",798927,"English","# Contents\n## SOC 2 Review Template Basic\n## SOC 2 Review Template Advanced\n## Guide – Where Do I Find That Information?\n## Complementary User Entity Controls (CUECs)\n## User Entity Responsibilities (UERs)\n## Complementary Subservice Organizations Controls (CSOCs)\n## Disclaimer","[{\"question\":\"What information does the SOC 2 Review Template Basic collect?\",\"answer\":\"It collects company and audit details such as legal name, location, used services, data types, report type, system name, trust services categories, auditor information, examination period, exceptions/deviations, CSOCs, CUECs, and UERs.\"},{\"question\":\"What is included in the SOC 2 Review Template Advanced section?\",\"answer\":\"It provides optional assurance statements across specified functional areas, including business continuity and disaster recovery, incident response, human resources policies, anonymous/ethics reporting, risk assessment and mitigation, and several technical and operational controls.\"},{\"question\":\"How are conclusions and approvals handled in the template?\",\"answer\":\"The template includes a conclusion section and captures preparer and reviewer information with dates for sign-off.\"}]","SOC 2 Review Template - Basic - Advanced | PDF",1789227645,{"code":4,"msg":82,"data":98},[99,104,109,114,119,124,127,132,137],{"id":100,"doc_module":22,"doc_module_name":25,"category_name":101,"show_sort_weight":102,"slug":103},11,"Presentations",90,"presentations",{"id":105,"doc_module":22,"doc_module_name":25,"category_name":106,"show_sort_weight":107,"slug":108},12,"Resumes",80,"resumes",{"id":110,"doc_module":22,"doc_module_name":25,"category_name":111,"show_sort_weight":112,"slug":113},14,"Invoices",70,"invoices",{"id":115,"doc_module":22,"doc_module_name":25,"category_name":116,"show_sort_weight":117,"slug":118},15,"Posters",60,"posters",{"id":120,"doc_module":22,"doc_module_name":25,"category_name":121,"show_sort_weight":122,"slug":123},16,"Social Media",50,"social-media",{"id":86,"doc_module":22,"doc_module_name":25,"category_name":29,"show_sort_weight":125,"slug":126},40,"forms",{"id":128,"doc_module":22,"doc_module_name":25,"category_name":129,"show_sort_weight":130,"slug":131},18,"Letters",30,"letters",{"id":133,"doc_module":22,"doc_module_name":25,"category_name":134,"show_sort_weight":135,"slug":136},21,"Paper Templates",5,"papers-templates",{"id":138,"doc_module":22,"doc_module_name":25,"category_name":139,"show_sort_weight":4,"slug":140},158,"General","general-158"]