Managed compliance
When Vanta flags it, we fix it
Managed compliance is a monthly retainer that keeps your SOC 2 program passing between audits. Vanta watches your environment around the clock. When it flags a vulnerability or a failing control, we fix it within the SLA in your agreement.
Your engineers stay on your roadmap. Your Vanta dashboard stays green. And when the next audit comes around, the evidence is already there.
Managed compliance
What the retainer covers
Remediation
- Fixes for failing Vanta tests
- Vulnerability remediation in AWS
- Configuration drift corrected
- Response times set by your SLA
Recurring controls
- Access reviews on schedule
- HR controls tracked, from training to performance reviews
- Policy and vendor risk reviews
- Evidence kept current in Vanta
Reporting
- Monthly summary of what we fixed
- Open items and owners
- Readiness check before each audit
- A team you can call
Process
How it works
- Step 1
Onboard
We review your Vanta account, AWS environment and current findings, then agree on the SLA.
- Step 2
Monitor
Vanta runs its tests continuously. New findings come to us.
- Step 3
Fix
We fix each finding within the agreed response time and record the evidence.
- Step 4
Report
Each month you get a short summary of what changed and what's next.
About pricing: Every company's scope is different: how many systems are in scope, which Trust Services Criteria you need and how much is already in place. So we don't publish prices. After a discovery call and a short scoping review, you get a written proposal with a fixed scope.
FAQs
Common questions
What is managed SOC 2 compliance?
Managed SOC 2 compliance means an outside team keeps your controls working between audits. With Taskew, that means we fix the vulnerabilities and failing tests Vanta finds in your environment, within an agreed SLA, and keep the recurring evidence up to date.
Do we need to have worked with Taskew on our SOC 2 audit?
No. If you already have a SOC 2 report and use Vanta, you give us access to your account and we start with a review of your current findings. If you don't have Vanta yet, you can get it through us.
What is the SLA?
Response times are set in your agreement, based on the severity of each finding and the size of your environment. We agree on them before we start.
Related
Also from Taskew
SOC 2 Type I readiness
Design your controls, close the gaps and get audit-ready for a point-in-time report.
Learn moreSOC 2 Type II readiness
Run your controls through the observation period with evidence your auditor can test.
Learn moreAWS cloud design, migration and management
Built with SOC 2 controls from the start, then maintained for you.
Learn moreTell us what your customers are asking for
Pick a few times that work for you. We'll call to learn about your environment and timeline, then send a written proposal if we're a good fit.