SOC2

Workstreams

• People who is contractors, who is in scope or out of scope @Raul Lopez
  everyone in scope would need to have all policies applied (every employee in US, every employee in Canada, some section of off-shore (for ex, Fedra, Sergey, Roger, Sunil?, etc.)

• Policies review for all non IT related @Raul Lopez

• Background Checks @Raul Lopez

• All IT related Policies review @Anand Kothari

• Integration Control @John Shao

• Process Control @Anand Kothari

 Problem Statement

 Scope

 Timeline

 Milestones and deadlines

 Reference materials