Agent skill · security · jeremylongshore
assisting-with-soc2-audit-preparation
Execute automate SOC 2 audit preparation including evidence gathering,
Why this skill is useful
Adds automation scripts for SOC 2 audit preparation, including evidence collection and compliance gap analysis that are not commonly available.
What it needs
Requires bash installed locally. About 3k tokens when loaded. Last updated 2026-08-07. 2,604 stars on the source repository.
What this skill does
Assisting With SOC 2 Audit Preparation Overview Automate SOC 2 Type I and Type II audit preparation by assessing controls across the five AICPA Trust Service Criteria (Security, Availability, Processing Integrity, Confidentiality, Privacy). Inventory existing controls and evidence, perform gap analysis against each Common Criteria point (CC1-CC9), and produce an audit-ready evidence package with a readiness score and remediation backlog. Prerequisites Policy and procedure documentation accessible in ${CLAUDESKILLDIR}/docs/ (information security policy, incident response plan, BCP/DR plan, vendor management procedures) Infrastructure-as-code and configuration files available for control verification Cloud provider audit logs accessible (AWS CloudTrail, Azure Activity Log, GCP Audit Logs) or exported Employee onboarding/offboarding and security awareness training records available Change management and access review logs accessible Write permissions for audit workspace in ${CLAUDESKILLDIR}/soc2-audit/ Instructions 1. Define audit scope: confirm in-scope services, systems, data stores, and audit period (Type I: point-in-time; Type II: observation window, typically 3-12 months). Identify applicable Trust Service Categories beyond the required Security criteria. 2. Assess CC1 -- Control Environment: verify organizational structure documentation, security policy, board oversight, and security role/responsibility matrix. Check for gaps in documented accountability. 3. Assess CC6 -- Logical and Physical Access Controls: verify MFA implementation, RBAC policies, password policy enforcement, access review cadence, and automated deprovisioning. Flag privileged access without monitoring. 4. Assess CC7 -- System Operations: check monitoring and alerting configurations, backup procedures and testing records, incident response logs, and capacity planning documentation. 5. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills jeremylongshore/assisting-with-soc2-audit-preparation