SOC scoping questionnaire
System and Organization Controls
SOC reporting evaluates the internal controls behind the services you deliver to customers — security, availability, processing integrity, confidentiality and privacy. This questionnaire scopes your report type, criteria and observation period.
What we ask
- Whether you need a Type I (point in time) or Type II (period) report
- Which Trust Services Criteria apply, based on what your customers ask for
- The services, systems and people inside the audit boundary
Takes a few minutes. Scope only — no pricing or commercial information is requested. Partial answers are fine; you can send the rest later and they are added to the same record.
Prefer to talk it through first? Scoping calls are often faster than a form when the environment is complicated or the requirement came from a customer or regulator. Book a consultation or send us the details and we will scope it with you.

QSA Authorised
CEMEA · Asia Pacific · USA
Delivering from Noida · Mumbai · Bengaluru · Pune · Dubai · Cairo · Melbourne — see all locations & addresses →
