SOC 2 Type I and Type II
Choose the audit type and period so control evidence and exported system-description material fit the intended SOC 2 engagement.
Choose the engagement
| Type | Evidence focus |
|---|---|
| Type I | Design of controls at the selected point in time. |
| Type II | Design and operating effectiveness over the selected period. |
Select the intended type in organization settings and align the audit dates with the auditor's engagement.
Prepare the evidence
Complete the system description, management statements, policy reviews and the control evidence requested for the chosen scope. For Type II, retain evidence across the period rather than replacing it with a single recent screenshot.
Sparta's readiness checks and exports organize this material. They do not produce a SOC 2 opinion, supply an auditor or establish operating effectiveness independently.
Export
Review the selected type and dates before building an audit package. Investigate evidence gaps and exceptions with the auditor; changing the audit type does not manufacture missing period coverage.
ISO 27001 evidence
Use Sparta to organize scoped information-security control evidence while retaining the management-system and assessment work outside the checklist.
ISO 42001 AI governance
Define the AI management system scope, review the AI controls and retain assessment and approval evidence for the systems you actually operate.