u/Substantial_Yard_789

I’m currently doing SOC 2 audits at an execution level but I’m transitioning into managing audit engagements and want to build a much deeper understanding of the framework.

My main question is: how did you actually build your competence?

How did you get a solid grasp of the AICPA standards, Trust Service Criteria, and the overall SOC 2 audit methodology? Any specific resources like books, courses, certifications, that you can recommend to build audit mindset and compliance knowledge.

Also, how did you go about getting a grip on technical aspects that addresses each control.