A lightweight command center for early-stage teams to manage security evidence, track compliance controls, and answer customer security questionnaires instantly.

<aside> 🛡️

Getting Started with Your SOC 2 Lite OS

Welcome to your new command center for security compliance! This template is designed to help you manage SOC 2 and ISO 27001 controls, track evidence, and respond to customer security questionnaires with speed and confidence.

Quick Start in 4 Steps:

1. Define Your Controls
   • Go to the Controls Database and list the security rules your organization follows (e.g., "CC6.1 - Logical Access Control"). Assign each control a framework, owner, and status.
2. Log and Link Your Evidence
   • As you gather proof (screenshots, logs, policy documents), add them to the Evidence Database.
   • Crucially, use the Linked Control property to connect each piece of evidence to the control it satisfies. The Expires On and Status fields will update automatically based on the frequency you set.
3. Build Your Reusable Answer Library
   • Navigate to the Q&A Library. Populate it with standard answers to common security questions (e.g., about your encryption standards or data storage policies). This is your "single source of truth."
4. Manage Incoming Questionnaires
   • When a client sends you a security questionnaire, log it in the Customer Questionnaires database.
   • Link to the pre-written answers from your Q&A Library to track which answers you've reused and complete questionnaires in record time. </aside>

IMPORTANT!

<aside> <img src="/icons/exclamation-mark-double_orange.svg" alt="/icons/exclamation-mark-double_orange.svg" width="40px" />

Untitled

</aside>

<aside> <img src="/icons/exclamation-mark-double_red.svg" alt="/icons/exclamation-mark-double_red.svg" width="40px" />

Untitled

</aside>

Purpose: To list all the security rules you are following

Controls Database

Untitled

Purpose: To store the proof (screenshots, logs) for each control

Evidence Database

Purpose: To save answers to common security questions so you never have to write them twice