SOC 2 Policy Drafting

Use this skill to draft policy documents and control narratives that are audit-ready, reviewable, and explicit about assumptions.

This skill is for policy and narrative drafting. It is not for proving the control exists. Do not invent operational facts to make the draft sound complete.

Core Rules

1. Draft from confirmed facts first.
2. Put placeholders or assumption notes where facts are missing.
3. Separate current-state language from recommended future-state language.
4. Keep policy statements auditable and specific.
5. Avoid promises the company cannot currently evidence.

Workflow

1. Identify the document type