SOC 2 (AICPA Trust Services Criteria)

1. SOC 2 overview

   Attestation reports on controls relevant to security, availability and more.

2. Trust Services Criteria

   Common criteria CC1 to CC9 and additional criteria.

3. Security (common criteria)

   Control environment, risk assessment, logical access, change management.

4. Availability and confidentiality

   Availability, confidentiality, processing integrity and privacy categories.

5. Type 1 vs Type 2

   Design vs operating effectiveness over a period.

6. SOC suite

   SOC 1, SOC 2 and SOC 3 differences.

Each section links to the official page. Titles and summaries by Extra Credit; the docs belong to their authors.