SOC 2 Assessment Capstone

5.5 CPEInformation Technology

The SOC 2 Assessment Capstone guides you through a complete SOC 2 examination from start to finish. You’ll learn how auditors evaluate system controls, test operating effectiveness, interpret the Trust Services Criteria, and assemble a full SOC 2 report using a real-world case study. Ideal for professionals looking to deepen their IT audit and information security skills.

VIDEO COURSE

Included with Premium

View plans Already enrolled? Sign in to continue

About this course

Course 9 of 9 in our IT Audit Learning Path! The SOC 2 Assessment Capstone provides an immersive, end-to-end walkthrough of the SOC 2 examination process using real-world examples and a comprehensive case study. Designed for learners with foundational knowledge of information security or IT audit, this course pulls together concepts from across the InfoSec discipline and demonstrates how they are applied in an actual audit environment.

Through detailed instruction and hands-on demonstrations, you’ll explore how SOC 2 reports are structured, how the Trust Services Criteria shape control expectations, and how auditors perform key activities such as reviewing system descriptions, evaluating control design, testing operating effectiveness, assessing exceptions, and drafting the final audit report. You’ll also follow an example organization through each stage of the SOC 2 lifecycle, gaining practical insight into audit planning, evidence collection, control testing, and reporting.

Whether you work in compliance, information security, internal audit, or a related field, this capstone course equips you with a deeper understanding of how SOC 2 assessments are conducted and how organizations prepare for and succeed in them.

What you’ll learn

Upon completion of this course, you will be able to:

To explain the purpose, structure, and key components of a SOC 2 report, including the Trust Services Criteria (TSC), system description, management assertion, control activities, and the auditor’s opinion.
To differentiate between SOC 1 vs. SOC 2 vs. SOC 3 and Type I vs. Type II engagements.
To describe the full SOC 2 audit lifecycle from planning to reporting.
To evaluate a service organization’s system description for completeness, accuracy, and alignment.
To design and perform SOC 2 control testing procedures and document results consistent with professional audit standards.
To identify common SOC 2 control deficiencies and determine their impact on audit conclusions.
To develop a SOC 2 audit testing plan and execute test steps within practical demo scenarios, using sample evidence, control walkthroughs, and technology tools commonly applied in SOC examinations.
To interpret SOC 2 findings and draft key elements of the final SOC 2 report.

Your instructor

Michael Carroll, CPA, CISA, CISM

Course content

4 lessons · 26 steps · 2h 46m of video

01LESSON 1Introduction to SOC 2 Reporting5 items

02LESSON 2SOC 2 Report Components9 items

03LESSON 3SOC 2 Lifecycle and Audit Process10 items

04LESSON 4Course Summary1 item

Locked

Final assessment

Course access is required to take this assessment.

30 questions70% to passUnlimited attempts

On course completion: 5.5 CPE and a certificate

Course details

CPE: 5.5
Field of study: Information Technology
Course level: Not specified
Delivery method: QAS™ Self Study
Prerequisites: Completion of prior courses in Wisdify’s <a href="https://wisdify.com/it-auditing-learning-path-cpe-courses/">IT Audit Learning Path</a> is recommended.
Advance preparation: Not specified
Course content: 4 lessons · 26 steps
Assessment: Final assessment · 30 questions · pass 70%
Completion deadline: 365 days from enrollment
Last updated: January 2026
Registration: A Wisdify account, eligible subscription, and course enrollment are required.