- Implementation of controls and processes required for a successful SOC 1 and SOC 2 audit. - SOC 1 and SOC 2 audit support and internal reviews. - Information technology controls design, documentation, testing, and remediation. - Policy and procedures documentation and reviews. - Enterprise risk assessments. - BCP/DRP (Business Continuity and Disaster Recovery) documentation and testing. - Information security training.