SOC Reporting Resource Library

Explore practical articles, checklists, and guides designed to help service organizations navigate SOC reporting, prepare for examinations, strengthen relevant controls, and respond to customer and stakeholder assurance requirements. Resources are provided for educational purposes and may not address every organization’s circumstances.

SOC 2 Provider Due-Diligence Checklist

Evaluate SOC 2 providers based on qualifications, independence, scope, evidence practices, and reporting red flags using this fillable due-diligence checklist.

Download Checklist

SOC System Description Preparation Worksheet

Organize the scope, services, system components, boundaries, subservice organizations, complementary user controls, and other information needed to prepare a SOC system description.

Download Worksheet

SOC Reporting Starter Checklist

Identify the business requirement, report type, system boundary, control readiness, evidence needs, and initial engagement considerations.

Download Checklist

Vendor SOC Report Review Checklist

Evaluate whether a vendor’s SOC report adequately addresses the relevant services, scope, reporting period, exceptions, subservice organizations, and complementary user controls.

Download Checklist

SOC Readiness: Documentation & Evidence Checklist

Organize control documentation, evidence, ownership, populations, reviews, and remediation before examination fieldwork.

Download Checklist

SOC Evidence Request Tracker

Track SOC examination requests, evidence owners, due dates, review status, auditor follow-up, identified gaps, and remediation in one editable workbook.

Download Tracker

SOC Report Decision Guide

Compare SOC 1 with SOC 2 and Type 1 with Type 2 to help determine which report may address your stakeholders’ needs.

View Decision Guide

Get SOC Reporting Updates & Resources

Subscribe to receive practical SOC reporting updates, readiness guidance, control-documentation tips, and new resources from JConner.