Sort Evidence Into Strong, Weak, and Missing

Drag each card into the right bucket, then check your score. Strong evidence Weak comfort artifact Missing evidence SOC 2 Type II covering the exact product and period Marketing slide saying enterprise-grade security Pen-test executive summary less than 12 months old Screenshot of a locked office door No list of subprocessors for customer data No breach notification commitment Current ISO certificate for in-scope environment Blog post about security culture No evidence of admin access review Signed DPA with subprocessors attached

Sign up free — one personalized lesson every day, matched to your role and goals.

Already have an account? Sign in