Understanding SOC 2: Driving value through assurance

In Part 1 of this two-part Building Confidence podcast series, Grace Allan, Assistant Manager at KPMG UK is joined by Tom Collins, Partner in KPMG UK’s Controls Assurance team, to explore the fundamentals of SOC 2 reporting and why it’s becoming increasingly important for organisations today. They unpack what a SOC 2 report is, who typically needs one, and the key drivers behind adoption - from contractual requirements to competitive pressures in the market.

The episode also covers how organisations can approach their SOC 2 journey in a structured way - starting with a Readiness assessment, addressing control gaps, and building strong Security foundations. They share practical insights on what sets successful programmes apart, and the risks of skipping key steps, helping organisations drive real value from SOC 2, not just compliance.

Listen to Part 2 here, as we explore how assurance reporting is evolving in response to the growing impact of AI.