When should the pen test occur?
The timing for your pen test may differ depending on your audit type, SOC 2 Type 1 or SOC 2 Type 2, as well as auditor requirements. We'd recommend selecting an auditor before moving forward with your pen test.
- SOC 2 Type 1: Pen test can have taken place anytime in the prior 12 months from the report date
- SOC 2 Type 2: Pen test has to occur during the audit period
Does Secureframe have a recommend pen test partner?
More information about our Pen Testing Partners can be found here.