workflow
SOC 2 Type II Interim Testing
Interim fieldwork for the Type II examination: cycle walkthroughs, design assessment against the Trust Services Criteria, the first operating-effectiveness testing wave over the agreed interim evidence window, and exception triage feeding remediation and retest planning before the period closes. Interim SOC 2 Type II fieldwork for the listed control selections and agreed interim window. Later-period testing and the service auditor's independent opinion remain outside this module. Attach this workflow to the existing audit engagement item; retain evidence and conclusions on its workflow steps.
Record JSON · Open in map · Data retrieval guide
Catalog revision: f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e. A connection does not establish full coverage.
Attributes
- domain
- audit
- department
- internal-audit
- lineOfDefense
- assure
Details
- teams
- internal-audit
- domains
- audit
- standards
- soc2
- sourceTemplateId
- workflow-library:audit-soc2-type2-interim-testing
- releaseId
- sha256:e9403dda67cabe5a114e5eb46995efc3ed5ece1970059463cdc7696ac0bbca24
- canonicalUrl
- https://assureswarm.com/workflows/all/?w=audit-soc2-type2-interim-testing
- capabilities
- mappingStatus
- mapped
- lineOfDefense
- assure
- controls
- UC-ACCESS-01
- UC-ACCESS-02
- UC-ACCESS-03
- UC-ACCESS-09
- UC-BCDR-03
- UC-BCDR-10
- UC-CONFIG-01
- UC-CONFIG-02
- UC-CRYPTO-01
- UC-GOV-16
- UC-GOV-21
- UC-HR-01
- UC-IR-06
- UC-IR-10
- UC-LOG-01
- UC-RISK-14
- UC-TRAIN-01
- UC-VULN-03
- roleIntegrity
- activityCount
- 0
- ermPhases
- lineRoles
- serviceModes
- warnings
Source
No record-specific source URL is provided.
Download workflow template · Release: sha256:e9403dda67cabe5a114e5eb46995efc3ed5ece1970059463cdc7696ac0bbca24
Connections
- SOC 2 Type II Interim Testing tests UC-RISK-14 — Track deficiencies to closure with remediation action plans
- SOC 2 Type II Interim Testing tests UC-CONFIG-02 — Authorize, test, and approve changes before production
- SOC 2 Type II Interim Testing tests UC-IR-06 — Respond to, contain, and eradicate declared incidents
- SOC 2 Type II Interim Testing tests UC-ACCESS-09 — Authenticate all users with multi-factor authentication
- SOC 2 Type II Interim Testing tests UC-TRAIN-01 — Deliver security awareness training to all personnel
- SOC 2 Type II Interim Testing tests UC-GOV-16 — Select and tailor a risk-based control baseline
- SOC 2 Type II Interim Testing tests UC-GOV-21 — Communicate and report risk and control information
- SOC 2 Type II Interim Testing tests UC-ACCESS-03 — Enforce least privilege, need-to-know, and segregation of duties
- SOC 2 Type II Interim Testing tests UC-BCDR-10 — Test recovery capabilities and train contingency personnel
- SOC 2 Type II Interim Testing tests UC-CONFIG-01 — Harden systems to approved secure configuration baselines
- SOC 2 Type II Interim Testing tests UC-ACCESS-01 — Provision and deprovision accounts through a managed lifecycle
- SOC 2 Type II Interim Testing tests UC-VULN-03 — Remediate identified flaws within defined timeframes
- SOC 2 Type II Interim Testing tests UC-HR-01 — Screen personnel commensurate with position risk
- SOC 2 Type II Interim Testing tests UC-IR-10 — Learn from incidents and communicate corrective actions
- SOC 2 Type II Interim Testing tests UC-CRYPTO-01 — Encrypt data at rest and in transit
- SOC 2 Type II Interim Testing tests UC-ACCESS-02 — Review user access rights periodically
- SOC 2 Type II Interim Testing tests UC-LOG-01 — Log security-relevant events across all systems
- SOC 2 Type II Interim Testing tests UC-BCDR-03 — Back up data and verify restorability