The RSI security web site breaks down the methods in certain detail, but the method in essence goes similar to this: Includes a new illustrative report That could be utilized when performing and reporting on the SOC two+ assessment. The security posture of one's Firm is assessed dependant on SOC https://www.nathanlabsadvisory.com/blog/tag/nathan-labs-advisory/