← All courses

Awareness · Assurance & trust

SOC 2 Awareness

Understand the controls behind customer trust.

Explore SOC 2, the Trust Services Criteria and how everyday responsibilities and reliable evidence support a service organisation’s assurance programme.

Secure payment by Stripe · for yourself or for your team

Standard and editionAICPA Trust Services Criteria (2017, points of focus revised 2022)

Last updated30 September 2026

Preview this course

Experience the learning
before you enrol.

Watch a sample from SOC 2 Awareness before you enrol.

SOC 2 AwarenessSample

Learning outcomes

Knowledge you can put to work.

Connect the subject to the responsibilities and decisions people encounter in their roles.

  • Understand the purpose of SOC 2 reporting.
  • Recognise the five Trust Services categories and the role of scope.
  • Understand how controls, evidence and individual responsibilities support assurance.

Part of: SOC 2 Awareness and Controls Training

Inside the course

A clear path through the essentials.

11 modules, 11 practice checkpoints and a final exam. Video runtimes are approximate; allow additional time for the practice questions and the final exam.

Part 1Module 1Approx. 10 min
  1. What a SOC 2 report is, and what it is not10 min
  2. Practice: What a SOC 2 report is, and what it is not3 questions
Part 2Module 2Approx. 8 min
  1. The SOC family and ISO/IEC 270018 min
  2. Practice: The SOC family and ISO/IEC 270013 questions
Part 3Module 3Approx. 9 min
  1. The five Trust Services Categories, and how criteria and controls relate9 min
  2. Practice: The five Trust Services Categories, and how criteria and controls relate3 questions
Part 4Module 4Approx. 8 min
  1. Type 1 or Type 2, and the period of review8 min
  2. Practice: Type 1 or Type 2, and the period of review3 questions
Part 5Module 5Approx. 8 min
  1. The system description (the nine description criteria)8 min
  2. Practice: The system description (the nine description criteria)3 questions
Part 6Module 6Approx. 8 min
  1. Subservice organisations and your customers' own controls8 min
  2. Practice: Subservice organisations and your customers' own controls3 questions
Part 7Module 7Approx. 8 min
  1. Scoping and readiness (Sterling's recommended approach)8 min
  2. Practice: Scoping and readiness (Sterling's recommended approach)3 questions
Part 8Module 8Approx. 8 min
  1. Evidence through the period8 min
  2. Practice: Evidence through the period3 questions
Part 9Module 9Approx. 8 min
  1. Fieldwork: how the service auditor tests; exceptions and management responses8 min
  2. Practice: Fieldwork: how the service auditor tests; exceptions and management responses3 questions
Part 10Module 10Approx. 8 min
  1. Reading a SOC 2 report, a vendor's report, bridge letters and year two8 min
  2. Practice: Reading a SOC 2 report, a vendor's report, bridge letters and year two3 questions
Part 11Module 11Approx. 7 min
  1. Your part every day7 min
  2. Practice: Your part every day3 questions

Frequently asked questions

Your questions,
answered.

About SOC 2 Awareness, its certificate and enrolment.

Ask Sterling
Who is SOC 2 Awareness training for?

It is for professionals and teams supporting service organisation controls: staff of SaaS, IT, BPO and other service organisations whose customers ask for SOC 2 reports, and anyone who operates a control or provides evidence for one. It explains how everyday responsibilities support customer trust. Those who will lead implementation can continue to the SOC 2 Trust Services Criteria & Controls course.

What does the SOC 2 Awareness course cover?

The course explores SOC 2, the Trust Services Criteria, and how everyday responsibilities and reliable evidence support a service organisation's assurance programme. Learners understand the purpose of SOC 2 reporting, recognise the five Trust Services categories and the role of scope, and see how controls, evidence and individual responsibilities support assurance.

How long does the SOC 2 Awareness course take?

SOC 2 Awareness is a set of short video modules followed by practice questions and a final exam. The course page shows the current number of modules and the approximate video runtime; allow additional time for the practice questions and the exam. With 12 months of access, you can complete it in one sitting or spread it over several sessions.

Do learners receive a certificate?

Yes. Learners who reach the 70% pass mark in the final exam receive a Sterling Academy Certificate of Completion for SOC 2 Awareness. Each certificate carries a unique number and a QR code, and anyone can check it online using the certificate number and the holder's surname. It is a training certificate for the individual learner.

Is the course online and self-paced?

Yes. SOC 2 Awareness is a self-paced online course made of short video modules, in English with captions. You study at your own pace during 12 months of access, and practice questions after modules help you check your understanding before the final exam. If a point is unclear, questions are answered by a Sterling consultant.

Can we enrol a team, and how much does it cost?

SOC 2 Awareness is US$19 per learner. Teams save 20% for 11 to 50 learners and 30% for 51 to 200 learners; 201 or more learners are priced on request. Client administrators can track their team's progress. Prices are in US dollars, excluding taxes, and Sterling confirms final pricing and enrolment.

Does completing this course give our organisation a SOC 2 report?

No. The Certificate of Completion is a training certificate: it shows that one person completed SOC 2 Awareness and reached the pass mark in its final exam. It is not certification of an organisation to any framework, and Sterling does not certify organisations. SOC 2 results in a report from a service auditor, a licensed CPA firm, after its examination of the organisation's controls. This course helps staff understand their part in that.

What are the five Trust Services categories in SOC 2?

SOC 2 reports are based on the AICPA Trust Services Criteria, grouped into five categories: security, availability, confidentiality, processing integrity and privacy. Security is covered by the common criteria; the other four are chosen according to the organisation's commitments to its customers. The course explains the categories and why the scope of a SOC 2 report matters.

Learning path

Where this course sits.

Assessment & completion

Complete the learning.
Keep a verifiable record.

Learners who complete the course and its final exam receive a numbered Sterling Academy Certificate of Completion with online QR verification.

This records course completion. It does not confer ISO certification or a professional auditor qualification.

Pass mark
70%
Prerequisites
None
Training records
Supports the Trust Services Criteria on developing competent people (CC1.4) and communicating responsibilities internally (CC2.2), with a dated record of who completed the training and their final exam result.
Ask about course requirements

Your next step

Ready to implement SOC 2?

Expert and experienced consultants, 8,100+ client engagements in 60+ countries, from gap assessment to a system ready for its certification audit.

Talk to a Sterling consultant

Not sure which course?

Plan your next step
in learning.

Discuss your learning needs