SOC 2 template · Type I and Type II
Encryption Policy
Encryption standards and key management practices. Written for your company, citing the controls below.
- Sections
- 7
- Controls cited
- 8
- Formats
- PDF, Word
- Shelf
- 22 SOC 2documents in all
No card needed to start.
SOC 27 sections
Encryption PolicyEncryption standards and key management practices.
- Cites
- CC6.1, CC6.7, ISO A.8.24 and 5 more
- Formats
- PDF and Word
SOC 2 shelf
Sections
Each written around your company: your tools, your roles, your review dates.
- Purpose and Scope
- Approved Algorithms
- Encryption at Rest
- Encryption in Transit
- Key Management
- Certificate Management
- Secrets Management
Controls it cites
The SOC 2 controls first, then the matching controls in other frameworks.
- CC6.1Logical & Physical Access: Security SoftwareSOC 2
- CC6.7Logical & Physical Access: Transmission SecuritySOC 2
- ISO A.8.24Use of CryptographyISO 27001
- HIPAA §164.312(e)(1)Transmission SecurityHIPAA
- PCI DSS Req. 3Protect Stored Account DataPCI DSS
- PCI DSS Req. 4Protect Data in TransitPCI DSS
- CSF PR.DS-1Data at RestNIST CSF
- CSF PR.DS-2Data in TransitNIST CSF
- SOC 27 sections
Logging and Monitoring Policy
CitesCC7.1 CC7.2 CC4.1 +7 +8PDF · WordCites CC7.1, System Operations: Detection Mechanisms (SOC 2); CC7.2, System Operations: Monitoring (SOC 2); CC4.1, COSO Principle 16: Monitoring Activities (SOC 2), and 7 more. - SOC 26 sections
Asset Management Policy
CitesCC6.1 CC6.5 ISO A.8.1 +3 +4PDF · WordCites CC6.1, Logical & Physical Access: Security Software (SOC 2); CC6.5, Logical & Physical Access: Asset Disposal (SOC 2); ISO A.8.1, User Endpoint Devices (ISO 27001), and 3 more. - SOC 28 sections
Code of Conduct
CitesCC1.1 CC1.4 CC1.5 +3 +4PDF · WordCites CC1.1, COSO Principle 1: Integrity & Ethics (SOC 2); CC1.4, COSO Principle 4: Competence Commitment (SOC 2); CC1.5, COSO Principle 5: Accountability (SOC 2), and 3 more. - SOC 217 sections
Management's Description of the System
CitesPI1.1 CC2.1 CC2.3 +1PDF · WordCites PI1.1, Processing Integrity: Processing Specifications (SOC 2); CC2.1, COSO Principle 13: Information Quality (SOC 2); CC2.3, COSO Principle 15: External Communication (SOC 2). - SOC 29 sections
Management's Assertion
CitesCC4.1 CC5.3PDF · WordCites CC4.1, COSO Principle 16: Monitoring Activities (SOC 2); CC5.3, COSO Principle 12: Policy Deployment (SOC 2). - SOC 29 sections
Information Security Policy
CitesCC1.1 CC1.2 CC1.3 +6 +7PDF · WordCites CC1.1, COSO Principle 1: Integrity & Ethics (SOC 2); CC1.2, COSO Principle 2: Board Oversight (SOC 2); CC1.3, COSO Principle 3: Management Structure (SOC 2), and 6 more.
SOC 2 on its own
- Documents
- 22
- Plan
- Growth
- Price
- $199 a month or $1,990 a year
Growth also covers HIPAA, so SOC 2 + HIPAA stays at $199 a month. Two frameworks besides HIPAA need Scale.
Your first policy is free. No card needed to start.