Compliance guides from our vCISO team.

• Readiness guide · 4 pagesSOC 2 Type IWhat a Type I report covers, who asks for it, the nine control areas the auditor checks, a 90-day path and the mistakes that delay it.Download the PDF ›
• Operating effectiveness guide · 4 pagesSOC 2 Type IIHow Type II differs from Type I, choosing the observation period, what evidence the auditor samples, handling exceptions and the first-year timeline.Download the PDF ›
• Self-assessment guide · 4 pagesCMMC Level 1The 15 FCI safeguards in plain English, what each looks like in a small business, how to self-assess and post to SPRS.Download the PDF ›
• Certification guide · 5 pagesCMMC Level 2The 110 NIST 800-171 practices, the enclave decision, SPRS scoring and POA&M rules, the path to a C3PAO assessment and the November 2026 deadline.Download the PDF ›

Need help applying any of this? Book a scoping call or call (714) 441-2900.