About the starter frameworks (please read)

Starter templates are original, simplified control objectives written by Controlkeep to help you organise your work. They are not the official text of any standard, do not cover every requirement, and using them (or this product) is not a certification or an audit opinion. Always check against the official standard and work with a qualified auditor.

The “SOC 2-style common criteria starter” and “ISO 27001-style Annex A starter” are written in our own words and grouped the way those frameworks are commonly organised, to give you a head start. SOC 2 is a reporting framework of the AICPA; ISO/IEC 27001 is published by ISO and IEC. We are not affiliated with either, and the starters do not reproduce their text or numbering.

A readiness percentage here measures what your team has marked as implemented. It is not an assessment, an audit result or a certification.