eBook │ 2024 edition
SOC 2: Penetration Testing and Vulnerability Scanning Guide
Understand how penetration testing and vulnerability scanning can support a SOC 2 audit, and what to consider when planning an assessment or choosing a testing provider.
PDF │ 21 pages │ 2.34 MB
About this resource
The guide addresses common questions about the role of security testing in SOC 2, the differences between pentesting and scanning, and the practical decisions involved in commissioning an assessment.
Inside the resource
The role of penetration testing and vulnerability scanning in SOC 2.
Assessment scope, testing methodologies, and testing frequency.
Factors affecting duration and cost, and how to evaluate a testing provider.
Who it is for
Security leaders, compliance managers, audit teams, cybersecurity engineers, and engineering managers preparing for a SOC 2 audit.
This is the 2024 edition. For current service details and testing guidance, read our SOC 2 penetration testing guide.