SOC 2 Ongoing Monitoring and Maintenance Assessment Questionnaire
Assess how your organization monitors, maintains, and reviews SOC 2 controls over time. Use this questionnaire to capture your current monitoring cadence, maturity, gaps, and supporting evidence.
Assessment Context
Organization or Team Name
*
Primary SOC 2 Scope or Focus Area
*
Please Select
Security
Availability
Confidentiality
Processing Integrity
Privacy
Multiple
Respondent Role or Title
*
Monitoring and Maintenance Practices
How often does your organization perform the following ongoing monitoring tasks?
*
Rows
Never
Quarterly
Monthly
Weekly
Continuous
Control testing
1
2
3
4
5
Log review
6
7
8
9
10
Vulnerability review
11
12
13
14
15
Exception tracking
16
17
18
19
20
Access review
21
22
23
24
25
Vendor monitoring
26
27
28
29
30
Evidence retention
31
32
33
34
35
Overall maturity of the ongoing monitoring process
*
1
2
3
4
5
Main challenge or gap identified
Primary evidence retention approach
Please Select
Centralized repository
Shared drive
GRC platform
Ticketing system
Other
Follow-up and Evidence
Next review date
*
 -
Month
 -
Day
Year
2 digit month, 2 digit day, 4 digit year
Date
Supporting evidence upload
Upload a File
Drag and drop files here
Choose a file
Cancel
of
Submit Assessment
Should be Empty: