Walk into the SOC2 walkthrough with the pack already assembled

Hand Carly the audit window and she'll pull access reviews from ServiceNow, the WAF config from Cloudflare, and assemble the evidence pack in Notion — gaps surfaced before the auditor sees them.

Cloudflare ServiceNow Notion

What Carly does

1. 01 List access reviews from ServiceNow for the audit window
2. 02 Export the current Cloudflare WAF configuration
3. 03 Compute the WAF rule diff vs the prior quarter
4. 04 Flag any access reviews closed without reviewer signature
5. 05 Assemble the evidence pack in Notion under Audits / <cycle>

Audits prepared in hours, not weeks

Evidence is assembled straight from the systems of record. Gaps surface before the auditor sees them. The walkthrough becomes a quick review — not a scramble.

Email this to Carly to kick it off.

Hey Carly,

SOC2 walkthrough is coming up and I need the Q1 evidence pack assembled. Pull every access review from ServiceNow that closed in the audit window, then export the current Cloudflare WAF configuration and diff it against last quarter so we can show the rule changes.

Flag any access reviews that closed without a reviewer signature so I can chase them down before the auditor does. Drop everything into Notion under Audits / Q1 with sections for access reviews, WAF diff, and exceptions.

Thanks!

More recipes for it & security teams

Triage a PagerDuty alert

Pull Datadog, correlate with traffic, start a war room in #incidents.

Read →

Investigate a Sentry error spike

Find the deploy, identify the file, file the fix, ping the team channel.

Read →

Onboard a new employee's access

Provision Auth0 groups, share Bitwarden collections, add to the right Slack channels.

Read →