SOC 2 Trust Services Criteria & Controls Implementation Training

It is for SOC 2 leads, core and implementation team members, and anyone advancing their SOC 2 knowledge beyond awareness level, such as compliance managers, IT and security managers and control owners in service organisations. Learners new to SOC 2 may start with Sterling Academy's SOC 2 Awareness course, which leads into this one.

It covers scoping the system and choosing Trust Services Categories; gap assessment and the control matrix of criterion, control, owner, frequency and evidence; the common criteria CC1 to CC9; availability, confidentiality, processing integrity and privacy; what the service auditor tests for Type 1 and Type 2; working with a US-licensed CPA firm; and running the programme into year two.

The course is planned as 46 video modules and about 5 hours of video, followed by practice questions and a final exam. Video runtimes are approximate, so allow additional time for the practice questions and the exam. With 12 months of access, learners can work through it criterion by criterion at their own pace.

Yes. Learners who reach the 70% pass mark in the final exam receive a Sterling Academy Certificate of Completion for SOC 2 Trust Services Criteria & Controls Implementation Training. Each certificate carries a unique number and a QR code, and anyone can check it online using the certificate number and the holder's surname. It is a training certificate for the individual learner.

Yes. SOC 2 Trust Services Criteria & Controls Implementation Training is a self-paced online course made of short video modules, in English with captions. You study at your own pace during 12 months of access, and practice questions after modules help you check your understanding before the final exam. If a point is unclear, questions are answered by a Sterling consultant.

SOC 2 Trust Services Criteria & Controls Implementation Training has a list price of US$149 per learner, with a limited-time offer of US$99 per learner until 31 December 2026. Teams save 20% for 11 to 50 learners and 30% for 51 to 200; 201 or more learners are priced on request. Client administrators track their team's progress. Prices exclude taxes, and Sterling confirms final pricing.

No. The Certificate of Completion is a training certificate: it shows that one person completed SOC 2 Trust Services Criteria & Controls Implementation Training and reached the pass mark in its final exam. It is not certification of an organisation to any framework, and Sterling does not certify organisations. A SOC 2 report is issued by a service auditor, a US-licensed CPA firm, after it examines the organisation's controls. This course prepares teams to design, operate and evidence those controls.

Both are reports by a service auditor. The course explains what the auditor asks, samples and tests for each: a Type 1 report looks at the design of controls at a point in time, while a Type 2 report also tests how the controls operated over a period. That is why the course covers keeping evidence through the whole period.