Secure Controls Framework
Download The SCF
SOC 2

What is a SOC 2 bridge letter?

Direct Answer

A SOC 2 bridge letter (also called a gap letter) is a letter from service organization management confirming that no material changes to the control environment occurred between the end of the SOC 2 report period and a specified current date. Customers use bridge letters when a SOC 2 report has expired but a new one is not yet available. Bridge letters do not substitute for a full SOC 2 audit.

Keep Exploring

Relevant Resources

References

Authoritative Sources