Free, no sign-up to start: the plan opens as a live, editable Gantt chart. 14 tasks across 5 phases, about 20 weeks if every task runs in sequence.
What's in the template
| Phase | Task | Example duration |
|---|---|---|
| Scope | Choose framework and scope | 5 days |
| Scope | Select auditor | 10 days |
| Assess | Gap assessment | 10 days |
| Assess | Risk assessment | 5 days |
| Remediate | Write or update policies | 14 days |
| Remediate | Implement missing controls | 30 days |
| Remediate | Employee security training | 7 days |
| Remediate | Vendor reviews | 10 days |
| Evidence | Evidence collection | 21 days |
| Evidence | Readiness review | 5 days |
| Evidence | Fix readiness findings | 10 days |
| Audit | Audit fieldwork | 10 days |
| Audit | Respond to auditor requests | 5 days |
| Audit | Report received | 1 day |
Durations are examples to replace with your own estimates, not benchmarks.
About this compliance audit preparation plan
Whether it is a SOC 2 report, an ISO certification or an internal audit, preparation follows the same shape: decide the scope, find the gaps, close them, collect evidence and run a readiness check before the auditor arrives. This plan gives each step its own row and owner.
It is a planning aid, not compliance advice. Your auditor and framework define what is actually required.
Who it's for: Security, compliance and operations leads at small and mid-size companies.
How to use it
- Open the plan. Click Open in the editor.
- Assign control owners. Give every remediation task an owner from engineering, HR or operations.
- Run remediation tracks in parallel. Unlink policies, controls, training and vendor reviews so they run together. In the task panel, remove the predecessor, then set the new start date. Then check that the task that came next still lists the earlier work as a predecessor, so delays keep cascading.
- Share with leadership. Share a read-only link for status updates.
Planning tips
- Collect evidence as controls go live rather than at the end.
- Have someone who didn't build the controls run the readiness review.
- Book the auditor early; their calendars fill up.
Frequently asked questions
- How long does audit preparation take?
- It depends on how many gaps you find. This template spans about five months in sequence; parallel remediation shortens it.
- Does this template make us compliant?
- No. It organizes the work; your framework and auditor determine the requirements.
- Can I export the plan for the board?
- PDF downloads are on Solo ($12/month).
Related templates
The free plan saves one project. Downloads (PDF, CSV) and more projects are on Solo, $12/month.