There is a lot of overlap between ISO 27001:2022 and SOC 2. So, if your organisation has an ISO 27001-conformant ISMS in place, this will be a great starting point for meeting the requirements of SOC 2, although some extra effort will be required to become fully compliant. As a very rough ‘rule of thumb’, having an ISMS that is fully conformant to ISO 27001 represents around 75% of what will be required to achieve a successful SOC 2 audit. However, further work will be needed to ensure that you can fully evidence the operational effectiveness of your information security controls over the defined reporting period, and to ensure that you have appropriate processes and controls in place for the areas of people management, organisational governance and communication that are not included in ISO 27001.
On our path of growing our business, we have found in URM a very capable and knowledgeable consultancy firm to guide and structure our processes towards SOC 2 compliance. The consultancy by URM played an essential role in building our competences and expanding the compliance framework for our SaaS based propositions.
Scientific data platform
All you need to meet SOC 2 requirements
If your organisation has received a request for a SOC 2 report and is looking to meet all the necessary requirements, URM can offer you informed guidance and practical support.
Find out more
related BLog
Preparing for a Successful SOC 2 Audit
Published on
17 Oct
2025
URM’s blog offers key advice on what to expect from your SOC 2 audit in practice, the types of evidence you will need to provide, how best to prepare, and more.
Read more
Information Security
Published on
29/8/2025
SOC 2 ExplainedURM’s blog answers key questions about SOC 2, including what it is & who it applies to, why it is beneficial, how SOC 2 reports are structured & more.
Read more
"
We’d like to thank our assessor for his usual thorough and fully detailed attention to our system. Our ISMS is being spoken about in much awe and reverence within the wider organisation and I can honestly say that, without his support and wisdom over the last few years, this would not be happening.
contact US
Let us help you
Let us help you in your compliance journey by completing the form and letting us know how we can best support you.