The RSI security site breaks down the techniques in a few element, but the process in essence goes similar to this: Features a new illustrative report Which might be used when executing and reporting on the SOC two+ assessment. The security posture within your organization is assessed according to SOC https://www.nathanlabsadvisory.com/resource.html