22 April 2025
The System and Organisation Controls (SOC) 2 framework was developed by the American Institute of CPAs (AICPA), the national organisation for Certified Public Accountants (CPAs). However, the framework is not only relevant to the USA and organisations based there.
A big driver for SOC 2 compliance in Europe is US firms looking for assurance from their European supply chain partners, making SOC 2 compliance increasingly relevant in sectors such as Defence, Health, Finance, and Technology.
In this paper, we provide a guide to SOC 2 audits, demonstrating how the SOC 2 framework aligns with established cybersecurity frameworks and regulations such as ISO 27001 and GDPR.
