SOC 2 template · Type I and Type II
Password Policy
Establishes password creation, management, and rotation requirements. Written for your company, citing the controls below.
- Sections
- 7
- Controls cited
- 6
- Formats
- PDF, Word
- Shelf
- 22 SOC 2documents in all
No card needed to start.
SOC 27 sections
Password PolicyEstablishes password creation, management, and rotation requirements.
- Cites
- CC6.1, CC6.2, ISO A.8.5 and 3 more
- Formats
- PDF and Word
SOC 2 shelf
Sections
Each written around your company: your tools, your roles, your review dates.
- Purpose and Scope
- Password Requirements
- Password Management
- Multi-Factor Authentication
- Service Account Credentials
- Password Recovery
- Enforcement
Controls it cites
The SOC 2 controls first, then the matching controls in other frameworks.
- CC6.1Logical & Physical Access: Security SoftwareSOC 2
- CC6.2Logical & Physical Access: CredentialsSOC 2
- ISO A.8.5Secure AuthenticationISO 27001
- HIPAA §164.312(d)Person or Entity AuthenticationHIPAA
- PCI DSS Req. 8Identify Users & AuthenticatePCI DSS
- CSF PR.AA-1Identity ManagementNIST CSF
- SOC 27 sections
Data Classification Policy
CitesC1.1 CC6.7 ISO A.5.12 +3 +4PDF · WordCites C1.1, Confidentiality: Identification (SOC 2); CC6.7, Logical & Physical Access: Transmission Security (SOC 2); ISO A.5.12, Classification of Information (ISO 27001), and 3 more. - SOC 28 sections
Acceptable Use Policy
CitesCC1.1 CC1.4 CC1.5 +3 +4PDF · WordCites CC1.1, COSO Principle 1: Integrity & Ethics (SOC 2); CC1.4, COSO Principle 4: Competence Commitment (SOC 2); CC1.5, COSO Principle 5: Accountability (SOC 2), and 3 more. - SOC 210 sections
Incident Response Plan
CitesCC7.3 CC7.4 CC7.5 +5 +6PDF · WordCites CC7.3, System Operations: Incident Response (SOC 2); CC7.4, System Operations: Incident Handling (SOC 2); CC7.5, System Operations: Recovery (SOC 2), and 5 more. - SOC 28 sections
Business Continuity Plan
CitesA1.1 A1.2 A1.3 +4 +5PDF · WordCites A1.1, Availability: Capacity Planning (SOC 2); A1.2, Availability: Recovery (SOC 2); A1.3, Availability: Recovery Testing (SOC 2), and 4 more. - SOC 28 sections
Disaster Recovery Plan
CitesA1.2 A1.3 CC7.5 +4 +5PDF · WordCites A1.2, Availability: Recovery (SOC 2); A1.3, Availability: Recovery Testing (SOC 2); CC7.5, System Operations: Recovery (SOC 2), and 4 more. - SOC 28 sections
Change Management Policy
CitesCC8.1 CC3.4 ISO A.8.32 +6 +7PDF · WordCites CC8.1, Change Management (SOC 2); CC3.4, COSO Principle 9: Change Impact (SOC 2); ISO A.8.32, Change Management (ISO 27001), and 6 more.
SOC 2 on its own
- Documents
- 22
- Plan
- Growth
- Price
- $199 a month or $1,990 a year
Growth also covers HIPAA, so SOC 2 + HIPAA stays at $199 a month. Two frameworks besides HIPAA need Scale.
Your first policy is free. No card needed to start.