SOC 2 compliance in Cybersecurity - Mini Project: Build & Apply

Understanding SOC 2 Compliance

📖 Scenario: You work in a company that handles customer data. Your manager asks you to help understand SOC 2 compliance to ensure your company protects data properly.

🎯 Goal: Build a simple checklist of SOC 2 Trust Service Criteria and understand their purpose.

📋 What You'll Learn

Create a dictionary with the five SOC 2 Trust Service Criteria and their descriptions

Add a variable to track the number of criteria

Use a loop to create a list of criteria names

Add a final statement summarizing SOC 2 compliance purpose

💡 Why This Matters

🌍 Real World

SOC 2 compliance is important for companies that store or process customer data to prove they protect data properly.

💼 Career

Understanding SOC 2 helps roles in cybersecurity, IT auditing, compliance, and data protection to ensure organizational trust and security.

1

Create SOC 2 Criteria Dictionary

Create a dictionary called soc2_criteria with these exact entries: 'Security' mapped to 'Protects system against unauthorized access', 'Availability' mapped to 'System is available for operation and use', 'Processing Integrity' mapped to 'System processing is complete, valid, accurate, timely, and authorized', 'Confidentiality' mapped to 'Information designated confidential is protected', and 'Privacy' mapped to 'Personal information is collected, used, retained, disclosed, and disposed properly'.

Cybersecurity

# Create the soc2_criteria dictionary with exact entries
# Your code here

Need a hint?

Use curly braces to create a dictionary with keys and values exactly as given.

2

Add Criteria Count Variable

Add a variable called criteria_count and set it to the number of entries in the soc2_criteria dictionary.

Cybersecurity

soc2_criteria = {
    'Security': 'Protects system against unauthorized access',
    'Availability': 'System is available for operation and use',
    'Processing Integrity': 'System processing is complete, valid, accurate, timely, and authorized',
    'Confidentiality': 'Information designated confidential is protected',
    'Privacy': 'Personal information is collected, used, retained, disclosed, and disposed properly'
}
# Add criteria_count variable here
# Your code here

Need a hint?

Use the len() function to get the number of items in the dictionary.

3

Create List of Criteria Names

Use a for loop with variable criterion to iterate over soc2_criteria.keys() and add each criterion to a list called criteria_names.

Cybersecurity

for criterion in soc2_criteria.keys():
    criteria_names.append(criterion)
# Add summary variable here

Need a hint?

Use soc2_criteria.keys() to get all criteria names and add them to the list.

4

Add SOC 2 Summary Statement

Add a variable called summary and set it to the string 'SOC 2 compliance ensures organizations protect customer data through these five trust criteria.'

Cybersecurity

summary = 'SOC 2 compliance ensures organizations protect customer data through these five trust criteria.'

Need a hint?

Assign the exact string to the variable summary.