SOC 2 Evidence Collection

Use this skill to gather, normalize, and judge evidence for SOC 2 controls. Focus on evidence quality, coverage, and traceability.

This skill is for collecting and evaluating artifacts. It does not replace a control review and it does not draft policies.

Core Rules

1. Prefer system exports, tickets, logs, and reports over screenshots.
2. Tie every artifact to a control area and time period.
3. Mark weak evidence honestly.
4. Keep a reusable evidence register.
5. When facts are missing, write a follow-up request instead of making assumptions.

Workflow

1. Define the evidence request