Make a timeline and delegate duties (compliance automation software is likely to make this exercise much less time intensive) Includes a new illustrative report Which may be made use of when carrying out and reporting over a SOC 2+ examination. A SOC 2 examination is a report on controls at https://www.nathanlabsadvisory.com/blog/nathan/why-ccc-certification-is-essential-for-saudi-arabian-companies/