A customer wanted SOC 2 Type 2 in 12 months, and a gap analysis said it was not ready. Amy Ford of Steel Patriot Partners explains the Type 1 first path and how education got the company through.
Amy Ford, Chief Operations Officer and President at Steel Patriot Partners, joins Sean Martin to talk about the moment after a company commits to compliance and nobody is sure what happens first. Sean frames the conversation around sequencing the first ninety days: what to do first, what can wait, and where people go wrong.
Ford describes how Steel Patriot Partners helps companies through their compliance engineering journey, from start to finish or in the pieces in between. Customers arrive for different reasons, from contractual obligations to a federal contract. Ford says the team starts by asking why the company is doing this and whether its leadership is on the same page.
Sean asks what happens when teams start with the technical controls. Ford says that puts the cart before the horse, and that scope and boundary come first so engineers do not do work an auditor will never look at. She also shares what she sees when companies move from the commercial space into FedRAMP or CMMC, and why she recommends a greenfield build.
The conversation closes with a customer story. The customer asked for SOC 2 Type 2 in 12 months. A gap analysis showed it was not ready, so Ford recommended a Type 1 first, plus a letter to the customer's own customer describing the plan. Per Ford, the company went that way, was educated rather than ripped and replaced, and came through a successful Type 2 with rave reviews.
Sean describes the outcome as a business decision driven by a specific deal, with a path matched to the customer's environment, team and infrastructure. Ford adds that other customers choose to rip and replace, and the team follows their lead.
If you are weighing a compliance deadline set by a deal, this episode shows how a gap analysis can change the plan before the work begins.
This is a Brand Spotlight. A Brand Spotlight is a ~15 minute conversation designed to explore the guest, their company, and what makes their approach unique. Learn more: https://www.studioc60.com/creation#spotlight
GUEST
Amy Ford, Chief Operations Officer and President at Steel Patriot Partners
On LinkedIn: https://www.linkedin.com/in/amylfordcoo/
RESOURCES
Find Your Path – Steel Patriot Partners | https://www.steelpatriotpartners.com/find-your-path
Learn more about Steel Patriot Partners: https://www.steelpatriotpartners.com/
▶︎ Want your brand on ITSPmagazine? Explore all of the options here: https://www.itspmagazine.com/advertise
KEYWORDS
Amy Ford, Steel Patriot Partners, Sean Martin, brand story, brand marketing, marketing podcast, brand spotlight, SOC 2, SOC 2 Type 1, SOC 2 Type 2, gap analysis, compliance engineering, FedRAMP, CMMC, ISO 27001, compliance scoping, greenfield build
Read the full story on ITSPmagazine: https://www.itspmagazine.com/blog?p=a-soc-2-type-1-and-a-letter-moved-a-customer-toward-type-2
More from Steel Patriot Partners on ITSPmagazine: https://www.itspmagazine.com/blog?brand=steel-patriot-partners