Curriculum traceability
SOC 2 (Trust Services Criteria)
This matrix shows how each curriculum area maps to SOC 2 (Trust Services Criteria)requirements — the clause or control it supports, how it's taught, and the evidence the learner and organisation receive. It's a sample, illustrative mapping; your live records (completions, assessment scores, version history) form the per-organisation evidence pack.
What this supports — and what it doesn't
These programs support preparation for SOC 2 (Trust Services Criteria) certification: they deliver the awareness and competence training the standard requires (notably Clause 7.2 Competence, 7.3 Awareness, and Annex A 6.3) and produce the documented completion and assessment records auditors look for. They do notby themselves certify your organisation or any individual, and they don't guarantee certification — your organisation still implements the management system and is audited by an accredited certification body. Training is the supporting evidence, not the certificate.
SOC 2 — AICPA Trust Services Criteria Practitioner
| Curriculum area | SOC clauses / controls | Method | Evidence produced |
|---|---|---|---|
| SOC 2 Foundations | TSP 100 | Lesson + KC | Completion + score |
| Common Criteria CC1-CC9 | CC1-CC9 | Lesson + KC | Completion + score |
| Optional Categories A/C/PI/P | A1, C1, PI1, P1-P8 | Lesson + KC | Completion + score |
| Audit Engagement + Remediation | SSAE 18 / AT-C 205 | Lesson + KC | Completion + score |
Hover a clause code for its title. Clause references follow SOC 2 (Trust Services Criteria). For a per-organisation, audit-ready evidence pack, get in touch.