SOC 2 Evidence Closure
Close the gaps. Build the evidence. Leave with the report.
$2,500 starts the work.
If you continue, every dollar is credited toward the $10,000 Evidence Closure Loop. We stay in the agreed scope through remediation, reruns, retesting, and closure. Then you receive a practitioner-signed SOC 2 Examination Readiness Report from Edward J. Beltran, CPA (Arizona), plus a structured evidence package for your independent CPA to evaluate in its own SOC 2 examination.
Evidence Closure covers the agreed controls, criteria, systems, and operating environment. A formal SOC 2 report is issued separately by an independent CPA firm. Materially new systems, newly added control families, or expanded criteria are a change in scope.
+
This is what you are buying
Something you can actually put in their hands.
The destination is not another readiness score. It is a professional, signed evidence report showing what was evaluated, what the evidence established, what had to be remediated, and what remains limited.
Support the security, procurement, or deal conversation with more than “we are working on SOC 2.”
Show the defined control scope, the evidence evaluated, and the result.
Show what was open, what closed, and what the evidence now supports.
Provide supporting evidence while the formal SOC process continues.
Provide a structured evidence package for the independent CPA to evaluate within its own examination.
SOC 2 Examination Readiness Report
Client XYZ · Assessment against specified Trust Services Criteria · July 1–31, 2026
READY FOR INDEPENDENT SOC 2 EXAMINATION
A conclusion you can explain.
- Defined assessment scope. The exact criteria, controls, systems, period, and evidence populations evaluated.
- What the operating standard required. Not simply whether a policy document existed.
- What evidence was examined. Source records, populations, traceability, and procedures.
- What the evidence established. Supported requirements, departures, unresolved evidence, and limitations.
- What changed during closure. Historical gaps remain visible instead of being erased.
- A named practitioner and signature. Edward J. Beltran, CPA (Arizona), in his Pulse practitioner role.
Pulse reports what the defined evidence establishes. The report does not represent that the organization has completed a SOC 2 examination or that every Trust Services Criterion is satisfied.
Step 1 · The working report
First, find exactly what does not hold up.
$2,500 Execution Integrity Gap Check. Bring your policies, controls, platform exports, consultant work, prior assessments, and existing evidence. Pulse pressure-tests the current state and gives you the working remediation artifact.
Illustrative sample
Execution Integrity Gap Report
Client XYZ · SOC 2 readiness scope
| Requirement | Finding | Required closure | Status |
|---|---|---|---|
| CC6.x | Approver authority not established. | Establish authorized approver evidence and retest. | ● OPEN |
| CC7.x | Monitoring record supports defined requirement. | No remediation. | ● CLOSED |
| CC8.x | Execution record missing from supplied evidence. | Capture source record and rerun. | ● REMEDIATING |
The Gap Report tells you what stands between today and the final report.
- What the relevant standard or control requirement calls for.
- What evidence currently exists.
- What Pulse found and why it does not yet support the standard.
- What must change and who should own it.
- What evidence will establish closure.
- Current state: OPEN → REMEDIATING → RETEST → CLOSED.
Nothing in the $2,500 report is withheld to force the next purchase.
If you continue, the full $2,500 becomes part of the $10,000 Evidence Closure investment.
Step 2 · Evidence Closure
What do I get for $10,000 total?
Not $2,500 plus another $10,000. The $2,500 Gap Check is fully credited, leaving $7,500 to complete the agreed Evidence Closure scope.
Know exactly what is preventing readiness and what must close.
Remediation, reruns, retesting, and closure for the agreed scope.
A named practitioner conclusion stating whether the scoped evidence is ready for independent examination.
The organized evidence trail your independent CPA can evaluate within its own examination.
The Gap Report identifies the condition preventing the evidence from supporting the standard.
Close the control, documentation, ownership, or operating issue within the agreed scope.
Collect or generate the source evidence needed to establish the operating result.
Rerun the defined procedure against the updated evidence.
Compare the evidence to the defined operating standard and retain the result.
Close the finding when the evidence supports the standard. Then move to the next finding.
Scope boundary: the loop covers the agreed controls, criteria, systems, and operating environment. Materially new systems, newly added control families, or newly introduced criteria are handled as expanded scope. If a client elects not to remediate or required evidence cannot be established, the final report explicitly carries that unresolved limitation rather than hiding it.
Watch the Gap Report close
The report changes as the evidence changes.
Open findings
| Access approval | OPEN |
| Privileged entitlement | OPEN |
| Monitoring review | CLOSED |
| Change authorization | REMEDIATING |
Evidence retest
| Access approval | RETEST |
| Privileged entitlement | RETEST |
| Monitoring review | CLOSED |
| Change authorization | RETEST |
Closure established
| Access approval | CLOSED |
| Privileged entitlement | CLOSED |
| Monitoring review | CLOSED |
| Change authorization | CLOSED |
Step 3 · Included after closure
Now the final report can be issued.
The Final SOC 2 Examination Readiness Report is included in the $10,000 Evidence Closure Loop. It is not another upsell. This is the artifact the work was building toward.
SOC 2 Examination Readiness Report
Based on the defined scope, procedures performed, and evidence evaluated, Pulse concluded that the organization’s scoped control environment and supporting evidence are ready to proceed into an independent SOC 2 examination, subject to the scope and limitations described in this report.
Need the formal SOC 2 report?
Your evidence should not disappear when the independent CPA arrives.
The Pulse evidence report is not the formal SOC 2 examination. After Evidence Closure, the structured evidence package can be provided to your existing CPA firm or another independent CPA firm you engage separately.
Bring the package to your CPA.
Your CPA independently determines engagement acceptance, independence, scope, procedures, what Pulse evidence can be used, what additional testing is required, and the ultimate conclusion.
Need to discuss the CPA path?
Pulse can discuss the next step after the evidence scope is clear. Any independent CPA engagement remains separately contracted and controlled by the CPA firm.
The structured evidence becomes an input to the independent examination, not a promise that the CPA will rely on it or issue a favorable SOC 2 report.
Keep the work you already paid for
Do not rip and replace.
Keep Vanta, Drata, Secureframe, your GRC platform, consultant, and CPA. Bring the policies, controls, mappings, evidence, and readiness work already in place. Pulse asks a different question:
Does the evidence actually support the operating standard?
And if it does not, what must close before it will?
Control→
Operating standard→
Evidence→
Execution→
Result
The people behind the work
Named practitioners. Visible credentials.
+
Edward J. Beltran, CPA
Ed signs the final Pulse evidence report in his Pulse practitioner role. The CPA credential identifies his professional background. The Pulse report is not represented as an independent CPA audit or attestation report.
Jesse Hart, MS, PMP
Jesse leads the methodology translating standards, operating requirements, and evidence into defensible findings and closure paths.
Start with the first check
Tell us when SOC 2 matters.
You do not have to decide everything today. We will confirm whether the $2,500 Execution Integrity Gap Check is the right first step.
- $2,500 Execution Integrity Gap Check.
- 100% credited toward $10,000 Evidence Closure.
- $7,500 remaining if you continue.
- Signed SOC 2 Examination Readiness Report included after closure of the agreed scope.
Start My $2,500 Gap Check
No payment or document upload on this page. Fit confirmed first.
Clear before you commit
The questions that matter.
Is the $2,500 another fee on top of $10,000?
No. The Evidence Closure Loop is $10,000 total for the agreed scope. You pay $2,500 for the Gap Check. If you continue, the entire $2,500 is credited, leaving $7,500 remaining.
What do I receive for the first $2,500?
The complete Execution Integrity Gap Report for the agreed readiness scope, including current findings, evidence gaps, required remediation, and the path to closure. Nothing is withheld to force the next purchase.
What does the $10,000 Evidence Closure Loop include?
For the agreed scope: gap identification → remediation → evidence collection → Pulse reruns → retesting → closure. The objective is alignment between the defined operating standard and the evidence.
Is the signed SOC 2 Examination Readiness Report another charge?
No. It is included as the intended end deliverable of the completed $10,000 Evidence Closure Loop for the agreed scope.
Can I give the final report to customers or investors?
The report is designed to support those conversations, subject to the agreed distribution and confidentiality terms. The recipient decides whether the report meets its requirements. Share the complete report, including its scope and limitations.
Is this a SOC 2 report?
No. A formal SOC 2 report is issued through an independent CPA examination. The Pulse report documents what the defined evidence established against the specified operating requirements and mapped criteria.
Can my CPA use this work?
You can provide the structured evidence package to your CPA. The independent CPA decides what evidence can be used, what additional procedures are required, and what conclusion, if any, is supported.
What if we already have Vanta, Drata, Secureframe, a consultant, or a CPA?
Keep them. Pulse is designed to use the work already in place rather than requiring you to rebuild the program.
The path
Close the gaps. Build the evidence. Leave with the report.
$2,500 Gap Check → $10,000 total Evidence Closure → Signed SOC 2 Examination Readiness Report → Structured evidence for the independent CPA examination when required.
Client XYZ · Final readiness report
SOC 2 Examination Readiness Report
Assessment against specified Trust Services Criteria · July 1–31, 2026
FINAL · SAMPLE
27
27
0
6
Executive conclusion
Based on the defined scope, procedures performed, and evidence evaluated in this illustrative report, Pulse concluded that the organization’s scoped control environment and supporting evidence are ready to proceed into an independent SOC 2 examination, subject to the scope and limitations described herein.
This sample is not a SOC 2 examination report, audit opinion, certification, or attestation report. It illustrates the proposed final Pulse examination-readiness report format.
Illustrative signature: /s/ Edward J. Beltran
01 / Defined boundary
What was evaluated.
Specified Trust Services Criteria
July 1–31, 2026
Access, change, monitoring
6 defined populations
Closure history remains visible
| Requirement | Initial finding | Remediation | Final result |
|---|---|---|---|
| Access approval authority | Approver authority not established. | Approved-role evidence added and procedure rerun. | SUPPORTED |
| Privileged entitlement | Entitlement record did not match approved set. | Configuration corrected; new population evaluated. | SUPPORTED |
| Change authorization | Execution record absent from supplied evidence. | Source-system record captured and joined. | SUPPORTED |
Operating standard
Each evaluated requirement was compared to a defined operating condition. The final result reflects the evidence available for that condition and the defined scope, not a blanket conclusion regarding every Trust Services Criterion or every system component.
02 / Evidence trail
What supports the result.
The report preserves the relationship between the requirement, operating rule, source evidence, procedure, and recorded result.
Illustrative result register
| Control requirement | Evidence population | Procedure | Final result |
|---|---|---|---|
| Authorized privileged access | Privileged-access grants | Compare executed grant to prior authorized approval and entitlement set. | SUPPORTED |
| Authorized changes | Production changes | Join executed change to approved change record and required authority. | SUPPORTED |
| Monitoring review | Monitoring alerts | Compare defined alert population to recorded review and disposition. | SUPPORTED |
Evidence identity
Source references, extract identities, version information, and integrity hashes are retained where applicable so a finding can be traced back to the packaged evidence. Hashing identifies exact bytes; it does not itself prove the truth or completeness of a source record.
03 / Boundaries that travel with the report
What the report establishes. And what it does not.
Established within the defined scope
- The specified requirements and operating standards evaluated.
- The evidence populations and procedures described in the report.
- The recorded final results after the documented closure process.
- The remaining limitations explicitly identified, if any.
Not established by this Pulse report
- Completion of a SOC 2 examination.
- An independent CPA audit or attestation opinion.
- Organization-wide compliance with every Trust Services Criterion.
- That an independent CPA will rely on specific Pulse procedures or evidence.
Independent CPA handoff
The structured evidence package may be provided to the client’s independent CPA. The CPA controls engagement acceptance, independence, scope, procedures, evaluation of evidence, additional testing, and the ultimate conclusion and SOC report.
Illustrative signature: /s/ Edward J. Beltran