Compliance · M&A
Two companies, two SOC 2 audits, one merger
Conquer bought Full Circle Insights, and both companies had SOC 2 Type 2 audits on the calendar.
The problem
Two companies, two tech stacks, two compliance programs, and SOC 2 Type 2 audits on the calendar for both.
What I did
I led the SOC 2 Type 2 program for both companies: I worked directly with the outside assessors, collected the evidence, wrote the system description the auditors evaluated against, and ran live tabletop exercises so the team had rehearsed a security incident before a real one showed up.
What changed
Both companies came through two full SOC 2 Type 2 audit cycles successfully. Honestly, even SOC 2 was fun.