soc2-gap - SOC 2 Type II Readiness Gap Analysis
Performs a SOC 2 Type II readiness gap analysis against the AICPA Trust Services Criteria and produces evidence requirements and a 90-day remediation roadmap.
Tags
Updated: 2026-10-08Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Determine assessment scope
- Review CC1-CC9 criteria
- Evaluate optional criteria
- Score control maturity
- Map evidence artifacts
- Identify control gaps
- Prioritize remediation actions
- Produce a 90-day roadmap
Inputs
- Scope description
- Codebase repositories
- Infrastructure-as-code repositories
- Security policies
- Architecture diagrams
- Deployment configurations
- IAM policies
- RBAC definitions
- CI/CD configurations
- Logging configurations
- Monitoring configurations
- Incident response documentation
- Vendor inventory
Outputs
- SOC 2 scope determination
- Criteria gap analysis
- Control maturity scores
- Evidence requirements
- Prioritized remediation roadmap
- 90-day action plan
Requirements
- Read tool support
- Grep tool support
- Glob tool support