Project status · week 37

SOC 2 Type II readiness

Owner
Priya Raman
Reported
8 Sep 2026
Next review
15 Sep
Window opens
1 Nov 2026

At risk

Changed from On track

The penetration test is now the entire critical path. Our vendor cannot start before 6 October and the 10 October readiness assessment needs their report, so a two-week slip in the test is a two-week slip in the window. Everything else is on or ahead of schedule.

Since last week: evidence automation closed on 21 August and the access review passed 60%. The pen test moved from 22 September to 6 October when the vendor reassigned our team — that one change is why this is amber.

Blockers

  1. Pen-test vendor cannot start before 6 October

    Blocking

    Owner Dana WhitfieldOpen 11 days Blocks 2 milestones

    Needs: approval to run the test with our second vendor at +£9,400, or a decision to move the observation window to 15 November.