SOC 2

Certification

SOC 2 is a System and Organization Controls audit report based on the AICPA Trust Services Criteria, commonly requested by enterprise customers to evaluate the security controls of service and SaaS providers.

Title graphic: SOC 2 (Certification)

Type	Certification
Wikipedia	en.wikipedia.org/wiki/System_and_Organization_Controls

Key points about SOC 2

Alignment with standards such as ISO 27001, GDPR and SOC 2 is essential for surviving inspections. · Build Audit-Ready Document Management with…
Principles include clear roles, enforced policies, compliance with GDPR, HIPAA or SOC 2, incident response and ongoing evaluation. · Microsoft 365 Security Through Clear…
Missing offboarding controls create compliance findings under ISO 27001, SOC 2 and GDPR. · Govern Microsoft 365 Guest Access and…

Episodes about SOC 2

Build Audit-Ready Document Management with SharePoint…

2025-12-11 · Video on YouTube

In a recent podcast, Mirko Peters discussed the critical importance of effective document management and compliance in organizations, emphasizing that lost documents can lead to organizational failure. He presented strategies for building an audit-ready…

Building Multi-Tenant SaaS with Power Pages and Dataverse

2026-05-28 · Video on YouTube

Breaking the Scale Barrier explores what it really takes to build scalable multi-tenant SaaS solutions with Microsoft Power Pages and Dataverse. Instead of focusing on simple customer portals or low-code demos, the episode dives into the architectural…

Microsoft 365 Security Through Clear Accountability

2026-03-13 · Video on YouTube

This episode breaks down why Microsoft 365 governance and security are not just technical concerns but organizational responsibilities. It explains how a structured governance framework—built on security, compliance, data protection, and clear…

Govern Microsoft 365 Guest Access and Offboarding

2025-11-03 · Video on YouTube

Your Microsoft 365 tenant is probably full of “guests who never left.” Contractors, vendors, and partners get invited for short projects—and their accounts quietly live on for years. That sprawl creates hidden risk: lingering access to SharePoint and Teams…

Timeline of episodes about SOC 2

Articles about SOC 2 (6)

Why Standard Microsoft 365 Settings Aren't Enough: The Case for Sovereign Tenants
2026-08-28 · Mirko Peters
When organizations first migrate to Microsoft 365, the immediate priority is typically getting users provisioned, setting up email, and enabling basic collaboration…
7 Surprising Facts About Copilot for Power BI
2026-08-12 · Mirko Peters
Welcome back to the podcast and our companion blog! If you have been following our recent discussions on the intersection of artificial intelligence and enterprise …
9 Surprising Facts About Data Loss Prevention in Power Platform
2026-08-11 · Mirko Peters
Welcome back to the podcast and our companion blog! If you have ever felt like managing security in low-code environments is a moving target, you are not alone. As …
Secure Meetings Best Practices for Microsoft Teams and Beyond
2026-05-21 · Mirko Peters
Keeping your virtual meetings secure isn’t just a nice-to-have—it’s non-negotiable these days. Sensitive business, customer, and personal informat…
Microsoft Entra Access Reviews Guide
2026-04-30 · Mirko Peters
Learn Microsoft Entra access reviews with practical guidance on security, governance, access control, implementation, and real-world use.
Single-Tenant vs Multi-Tenant Apps: Understanding Architecture Choices for Modern SaaS
2026-04-28 · Mirko Peters
Choosing the right SaaS architecture is not just a technical decision—it shapes your business for years to come. Whether you lean towards single-tenant or mul…

Frequently asked questions

Which standards does the episode link to document management?

It names ISO 27001, GDPR and SOC 2 as standards that inspections test. Meeting them requires ownership, lifecycle rules and data loss prevention rather than ad hoc folder habits. · From the episode: Build Audit-Ready Document Management with…

Which compliance standards does Power Pages support?

The episode mentions that Power Pages supports strong security and compliance with standards such as SOC 2 and GDPR for multi-tenant SaaS solutions. · From the episode: Building Multi-Tenant SaaS with Power Pages…

Which principles support accountability?

Clear roles and responsibilities, defined policies and controls that are monitored and enforced, compliance with rules like GDPR, HIPAA or SOC 2, incident response with consequences and ongoing audits and assessments. · From the episode: Microsoft 365 Security Through Clear…

Which compliance standards relate to guest access?

The episode names ISO 27001, SOC 2 and GDPR, where missing offboarding controls lead to audit findings. Auditors look for evidence that guests are reviewed and removed. · From the episode: Govern Microsoft 365 Guest Access and…

Glossary

Community wiki

Short info above, community knowledge below: add practical tips, examples or corrections. New contributions are reviewed first; trusted members publish directly.

Sources

Wikipedia: en.wikipedia.org/wiki/System_and_Organization_Controls
Feed for this topic (RSS): entity/soc-2/feed.xml
M365.FM episodes on this topic: 4
Articles on this topic: 6

Maintained by Mirko Peters (Microsoft MVP) · Last updated: 2026-11-03