SOC 2 & ISO 27001 Certification Case Study
Automation Services
Engagement Overview
AJQ Technology was engaged by a Technology Service Provider to support the organisation in achieving SOC 2 and ISO 27001 certification in parallel. The client had adopted SecureFrame as their compliance automation platform and required senior cyber security expertise to translate the framework into a defensible control environment, validated policies and procedures, and audit-ready evidence.
The engagement ran over a period of several months and was structured to take the client from initial assessment through to successful audit completion under both standards.
Scope & Complexity
Key complexity factors included
- Running SOC 2 and ISO 27001 preparation in parallel to avoid duplication of effort across overlapping control areas
- Operationalising SecureFrame so it functioned as a live compliance platform rather than a documentation repository
- Validating that documented policies and processes matched actual operational practice
- Preparing the team and the evidence base for two distinct external audits
AJQ Approach
AJQ began with an independent assessment of the existing control posture against both frameworks. From there, AJQ worked alongside their team to update controls, validate policies and processes end to end, and configure SecureFrame to reflect the client’s actual environment. AJQ remained engaged through both audit processes, supporting the client to evidence requirements clearly to the assessors.
Outcomes Achieved
- SOC 2 certification achieved on first pass
- ISO 27001 certification achieved on first pass
- A live, operational compliance platform in SecureFrame supporting ongoing assurance