SOC 1, SOC 2 & ISO 27001 Readiness
Altura provides SOC 1 and SOC 2 readiness support, SOC 2 gap assessments and ISO 27001 readiness advice. The work helps companies define scope, assign control owners, prepare documentation and organise evidence for independent assessment.
Altura is a readiness consultancy, not an auditor. The audit or certification itself is always carried out by an independent auditor or accredited certification body.
When this support is useful
You may need support when an enterprise customer requests an assurance report, you are preparing for your first audit, or existing policies and controls need to be brought into a consistent framework.
Support can also help when responsibilities are unclear, evidence is difficult to collect or a new product changes the scope of your assurance programme.
How Altura can help
- Carry out a SOC 2 or ISO 27001 gap assessment of your current position.
- Define the proposed scope and relevant systems and processes.
- Map risks to controls and assign control owners.
- Prepare or update policies and supporting documentation.
- Develop a remediation plan and organise audit evidence.
- Coordinate readiness work with management, technical teams and independent auditors.
For SOC 1, support may include assessing processes relevant to customers’ financial reporting, such as calculations, invoicing functionality and data exports.
What you receive
Depending on scope, deliverables may include a gap assessment, a prioritised remediation plan, a control matrix, policy updates, an evidence tracker and supporting system or process descriptions.
Frequently asked questions
Does Altura issue SOC reports or ISO 27001 certification?
No. Altura provides readiness and advisory support. SOC reports are issued by independent auditors, and ISO 27001 certification is provided by a certification body.
Can Altura help us decide which assurance programme is relevant?
Yes. Altura can help assess customer requirements, your service and the intended scope before you agree the audit approach with the relevant auditor or certification body.
Can we use our existing policies and evidence?
Yes. Existing materials are reviewed first so that useful work can be retained and gaps addressed.
Discuss your readiness project
Email hello@altura.is with the standard or report requested, your current stage and any customer or audit deadline.
Discuss audit readinessRelated services: SaaS and technology contract advice · Ongoing legal and governance support