{"id":55012,"date":"2025-08-20T03:08:34","date_gmt":"2025-08-20T03:08:34","guid":{"rendered":"https:\/\/www.process.st\/templates\/?p=55012"},"modified":"2025-08-20T03:08:34","modified_gmt":"2025-08-20T03:08:34","slug":"soc-2-evidence-collection-guide","status":"publish","type":"post","link":"https:\/\/www.process.st\/templates\/soc-2-evidence-collection-guide\/","title":{"rendered":"SOC 2 Evidence Collection Guide"},"content":{"rendered":"\n<section id=\"identify-relevant-soc-2-criteria\">\n <h2>Identify relevant SOC 2 criteria<\/h2>\n <div class=\"text-content\">\n  Before diving into evidence collection, let's start by identifying the specific SOC 2 criteria that are relevant to your organization. This foundational step sets the tone for the entire process. What are the key trust service criteria that apply? Are there aspects that need more focus based on your industry? A clear understanding here is crucial for gathering appropriate documentation. Gather your team and ensure everyone has a say in this phase, as different perspectives can highlight various needs. Some common challenges include aligning team insights and ensuring all criteria are covered; to remedy, hold a brainstorming session. Resources needed include SOC 2 framework documents and potential reference materials from the AICPA.\n <\/div>\n <div class=\"multi-choice-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Select applicable SOC 2 criteria <\/label> <select disabled class=\"form-control\"> <option value=\"\">Multiple options can be selected from this list<\/option> <\/select>\n  <\/div>\n  <ul class=\"items\">\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      1\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Security\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      2\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Availability\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      3\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Processing Integrity\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      4\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Confidentiality\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      5\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Privacy\n    <\/div><\/li>\n  <\/ul>\n <\/div>\n<\/section>\n<section id=\"determine-evidence-required-for-each-criterion\">\n <h2>Determine evidence required for each criterion<\/h2>\n <div class=\"text-content\">\n  With the criteria in hand, it\u2019s time to clarify the evidence needed for each one. This step ensures that any gaps in documentation will be spotted early on. What types of evidence can best support your claims? Consider interviews, policies, artifacts, or system outputs that validate each criterion's adherence. It can be challenging to specify what to collect without experience, so don't hesitate to consult SOC 2 guidelines or industry best practices. Collaboration with your compliance team may also provide valuable insights into what's essential. You'll want resources like regulatory standards here to guide your way.\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Detail evidence requirements for each criterion <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n<\/section>\n<section id=\"assign-team-members-for-evidence-collection\">\n <h2>Assign team members for evidence collection<\/h2>\n <div class=\"text-content\">\n  Next comes the exciting part\u2014putting your team to work! Assigning team members to gather the evidence is essential for keeping the process organized and efficient. Do you have team leads designated for each area? Consider skill sets and previous experiences to ensure the right people are collecting the right evidence. As you allocate responsibilities, clarify expectations and timelines. Potential challenges include overlapping duties or unclear assignments; make sure you communicate clearly to avoid these pitfalls. You may want to use collaboration tools for tracking progress, and this phase requires involvement from all relevant departments.\n <\/div>\n <div class=\"members-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Select team members responsible for evidence gathering <\/label> <select disabled class=\"form-control\"> <option value=\"A member or group will be selected here\">A member or group will be selected here<\/option> <\/select>\n  <\/div>\n <\/div>\n<\/section>\n<section id=\"collect-documentation-for-selected-criteria\">\n <h2>Collect documentation for selected criteria<\/h2>\n <div class=\"text-content\">\n  Now that your team is in place, let\u2019s get down to the nitty-gritty\u2014collecting the documentation! Each assigned member will retrieve the necessary records aligned with your identified SOC 2 criteria. How do you ensure everyone has what they need, and are there specific templates or formats to follow? Remember, clarity in instruction will help prevent miscommunication. Documentation types may range from user manuals to security policies. It can be overwhelming to manage the volume of information; employing a checklist may aid in ensuring nothing is overlooked. Make sure your preferred documentation storage method is established in advance!\n <\/div>\n <div class=\"file-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Upload collected documentation for criteria <\/label>\n   <div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"><i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here<\/button>\n   <\/div>\n  <\/div>\n <\/div>\n<\/section>\n<section id=\"gather-system-logs-and-reports\">\n <h2>Gather system logs and reports<\/h2>\n <div class=\"text-content\">\n  As part of the evidence gathering, the collection of system logs and reports is crucial. These logs often provide invaluable insights into system activities and user interactions. What logs are typically kept, and do they adequately represent the activity associated with each SOC 2 criterion? Be aware that gathering this data can involve sifting through technical logs which might be dense\u2014seek assistance from your IT team if needed. Finding patterns in these logs can affirm that your systems are functioning appropriately. Address potential difficulties by establishing a clear logging and reporting framework beforehand.\n <\/div>\n <div class=\"multi-select-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Check logs and reports to gather <\/label>\n  <\/div>\n  <ul class=\"items\">\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      1\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     System access logs\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      2\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Change management logs\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      3\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Incident response reports\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      4\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Firewall logs\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      5\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Backup logs\n    <\/div><\/li>\n  <\/ul>\n <\/div>\n<\/section>\n<section id=\"compile-user-access-records\">\n <h2>Compile user access records<\/h2>\n <div class=\"text-content\">\n  User access records are vital components of the overall evidence. This task involves gathering documentation that shows who has access to which systems and data. Are all access permissions documented and up-to-date? Think about how your organization manages user permissions and what records need to be collected. It\u2019s essential to verify that records highlight any changes over time to show compliance and organizational policy adherence. Challenges could arise from incomplete records; using a centralized access management tool can help avoid gaps in data collection. Regular audits can also streamline this process and ensure compliance.\n <\/div>\n <div class=\"file-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Upload user access records <\/label>\n   <div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"><i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here<\/button>\n   <\/div>\n  <\/div>\n <\/div>\n<\/section>\n<section id=\"document-policies-and-procedures\">\n <h2>Document policies and procedures<\/h2>\n <div class=\"text-content\">\n  Policies and procedures lay the groundwork for how your organization operates, and they must be documented meticulously. This task focuses on gathering and formatting these critical documents. Have all relevant policies been updated to reflect current practices? It\u2019s essential to review these documents for clarity and completeness, ensuring they show compliance with SOC 2 requirements. If questions arise about specific policies, make sure you have stakeholders review these before finalizing your documentation. Challenges might include outdated policies\u2014consider assigning specific individuals to keep these documents current.\n <\/div>\n <div class=\"file-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Upload documented policies and procedures <\/label>\n   <div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"><i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here<\/button>\n   <\/div>\n  <\/div>\n <\/div>\n<\/section>\n<section id=\"review-collected-evidence-for-completeness\">\n <h2>Review collected evidence for completeness<\/h2>\n <div class=\"text-content\">\n  We're reaching an exciting stage\u2014reviewing the gathered evidence for completeness! This critical step helps ensure no vital pieces are missing before you move on. Assemble your team for a collective review and check against your requirements checklist. Are the pieces of evidence aligning with what was expected? Pay special attention to gaps and invite team members to present their findings. The challenge here often lies in differing interpretations of requirements; encourage open dialogue to clear up any confusion. It's advisable to have a second set of eyes\u2014consider appointing a trusted reviewer for this task.\n <\/div>\n <div class=\"multi-select-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Checklist for evidence review <\/label>\n  <\/div>\n  <ul class=\"items\">\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      1\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     All criteria evidence collected\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      2\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Documentation is complete\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      3\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     User access reviewed\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      4\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Policies are up to date\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      5\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Logs are included\n    <\/div><\/li>\n  <\/ul>\n <\/div>\n<\/section>\n<section id=\"approval-compliance-officer\">\n <h2>Approval: Compliance Officer<\/h2>\n <div class=\"approval-content\">\n  <div class=\"header\">\n   <div class=\"list-title\">\n    Will be submitted for approval:\n   <\/div>\n  <\/div>\n  <div class=\"approval-rule-subject-tasks-list\">\n   <ul class=\"list\">\n    <li>\n     <div class=\"approval-rule-subject-tasks-list-item\">\n      <div class=\"item\">\n       <div class=\"container\">\n        <span class=\"title\">Identify relevant SOC 2 criteria<\/span>\n        <div class=\"body\">\n         Will be submitted\n        <\/div>\n       <\/div>\n      <\/div>\n     <\/div><\/li>\n    <li>\n     <div class=\"approval-rule-subject-tasks-list-item\">\n      <div class=\"item\">\n       <div class=\"container\">\n        <span class=\"title\">Determine evidence required for each criterion<\/span>\n        <div class=\"body\">\n         Will be submitted\n        <\/div>\n       <\/div>\n      <\/div>\n     <\/div><\/li>\n    <li>\n     <div class=\"approval-rule-subject-tasks-list-item\">\n      <div class=\"item\">\n       <div class=\"container\">\n        <span class=\"title\">Assign team members for evidence collection<\/span>\n        <div class=\"body\">\n         Will be submitted\n        <\/div>\n       <\/div>\n      <\/div>\n     <\/div><\/li>\n    <li>\n     <div class=\"approval-rule-subject-tasks-list-item\">\n      <div class=\"item\">\n       <div class=\"container\">\n        <span class=\"title\">Collect documentation for selected criteria<\/span>\n        <div class=\"body\">\n         Will be submitted\n        <\/div>\n       <\/div>\n      <\/div>\n     <\/div><\/li>\n    <li>\n     <div class=\"approval-rule-subject-tasks-list-item\">\n      <div class=\"item\">\n       <div class=\"container\">\n        <span class=\"title\">Gather system logs and reports<\/span>\n        <div class=\"body\">\n         Will be submitted\n        <\/div>\n       <\/div>\n      <\/div>\n     <\/div><\/li>\n    <li>\n     <div class=\"approval-rule-subject-tasks-list-item\">\n      <div class=\"item\">\n       <div class=\"container\">\n        <span class=\"title\">Compile user access records<\/span>\n        <div class=\"body\">\n         Will be submitted\n        <\/div>\n       <\/div>\n      <\/div>\n     <\/div><\/li>\n    <li>\n     <div class=\"approval-rule-subject-tasks-list-item\">\n      <div class=\"item\">\n       <div class=\"container\">\n        <span class=\"title\">Document policies and procedures<\/span>\n        <div class=\"body\">\n         Will be submitted\n        <\/div>\n       <\/div>\n      <\/div>\n     <\/div><\/li>\n    <li>\n     <div class=\"approval-rule-subject-tasks-list-item\">\n      <div class=\"item\">\n       <div class=\"container\">\n        <span class=\"title\">Review collected evidence for completeness<\/span>\n        <div class=\"body\">\n         Will be submitted\n        <\/div>\n       <\/div>\n      <\/div>\n     <\/div><\/li>\n   <\/ul>\n  <\/div>\n <\/div>\n<\/section>\n<section id=\"organize-evidence-into-a-structured-format\">\n <h2>Organize evidence into a structured format<\/h2>\n <div class=\"text-content\">\n  Now that we\u2019ve reviewed the evidence, it\u2019s time to organize everything neatly! What format will ensure the evidence is easily digestible and accessible for final review? Think about using folders, spreadsheets, or dedicated tools for submission. Structure is key\u2014consider how you can make it intuitive for stakeholders to navigate. This task might seem tedious but is incredibly necessary; it helps prevent any miscommunication later on. You may encounter disorganization or confusion, so create a clear, logical structure from the outset to sidestep potential pitfalls. Familiar documentation management systems may streamline this process.\n <\/div>\n <div class=\"file-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Upload organized evidence files <\/label>\n   <div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"><i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here<\/button>\n   <\/div>\n  <\/div>\n <\/div>\n<\/section>\n<section id=\"create-summary-report-of-evidence\">\n <h2>Create summary report of evidence<\/h2>\n <div class=\"text-content\">\n  To wrap up our evidence collection journey, we need to craft a summary report that encapsulates all the findings. What key points and data must be highlighted to convey your compliance status? This report will serve as a vital communication tool moving forward. It\u2019s important to balance detail with brevity; clear visuals or key metrics may enhance understanding. The challenges can include ensuring all relevant points are captured without overwhelming the reader, so consider creating an outline beforehand. You might want to use reporting software for efficiency, but this step requires thoughtful consideration about what to include.\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Draft summary report of evidence collected <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n<\/section>\n<section id=\"distribute-evidence-summary-for-final-review\">\n <h2>Distribute evidence summary for final review<\/h2>\n <div class=\"text-content\">\n  We\u2019ve created our summary, and now it\u2019s time to share it with the necessary stakeholders for final review. Who needs to see this report to provide their insights? Ensure you have identified all key team members and possibly leadership who should weigh in. This final feedback round is crucial for any last-minute adjustments before submission. Challenges could arise if certain stakeholders are hard to reach; consider setting deadlines for input. Ensure you're using an efficient method for distribution, and facilitate responses to promote engagement and feedback.\n <\/div>\n <div class=\"send-rich-email-content form-field-content\">\n  <!-- No Recipients --> <!-- No Recipients --> <!-- No Recipients -->\n  <div class=\"form-group subject\">\n   <label>Subject<\/label>\n   <p class=\"form-control-static\">Final Review Needed for Evidence Summary<\/p>\n  <\/div>\n  <div class=\"form-group body\">\n   <label>Body<\/label> <iframe srcdoc=\"<p>Hello Team,<\/p><p>Attached is the summary report of the evidence we collected for SOC 2 compliance. Please review it at your earliest convenience and provide any feedback you may have.<\/p><p>Thanks for your cooperation!<\/p>\n<style>*{font-family:Inter,&quot;Segoe UI&quot;,&quot;Roboto&quot;,&quot;Oxygen&quot;,&quot;Ubuntu&quot;,&quot;Cantarell&quot;,&quot;Fira Sans&quot;,&quot;Droid Sans&quot;,&quot;Helvetica Neue&quot;,system-ui,sans-serif}<\/style>\n\" sandbox=\"\"><\/iframe>\n  <\/div>\n  <div class=\"form-group\">\n   <button type=\"button\" disabled class=\"btn btn-default\"><i class=\"fa fa-envelope btn-icon\"><\/i> Send<\/button>\n  <\/div>\n <\/div>\n<\/section>\n","protected":false},"excerpt":{"rendered":"<p>Identify relevant SOC 2 criteria Before diving into evidence collection, let's start by identifying the specific SOC 2 criteria that are relevant to your organization. This foundational step sets the tone for the entire process. What are the key trust service criteria that apply? Are there aspects that need more focus based on your industry? [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"ep_exclude_from_search":false,"cover_icon_emoji":"\ud83d\udccb","cover_icon_url":"","tasks_count":"12","template_description":"Streamline SOC 2 compliance with our guide for efficient evidence collection, structured organization, and thorough review.","template_id":"rs2EXeV1tz542oOkJ4tNdA","task_0":"Identify relevant SOC 2 criteria","task_slug_0":"identify-relevant-soc-2-criteria","task_1":"Determine evidence required for each criterion","task_slug_1":"determine-evidence-required-for-each-criterion","task_2":"Assign team members for evidence collection","task_slug_2":"assign-team-members-for-evidence-collection","task_3":"Collect documentation for selected criteria","task_slug_3":"collect-documentation-for-selected-criteria","task_4":"Gather system logs and reports","task_slug_4":"gather-system-logs-and-reports","task_5":"Compile user access records","task_slug_5":"compile-user-access-records","task_6":"Document policies and procedures","task_slug_6":"document-policies-and-procedures","task_7":"Review collected evidence for completeness","task_slug_7":"review-collected-evidence-for-completeness","task_8":"Approval: Compliance Officer","task_slug_8":"approval-compliance-officer","task_9":"Organize evidence into a structured format","task_slug_9":"organize-evidence-into-a-structured-format","task_10":"Create summary report of evidence","task_slug_10":"create-summary-report-of-evidence","task_11":"Distribute evidence summary for final review","task_slug_11":"distribute-evidence-summary-for-final-review","task_12":"","task_slug_12":"","task_13":"","task_slug_13":"","task_14":"","task_slug_14":"","task_15":"","task_slug_15":"","task_16":"","task_slug_16":"","task_17":"","task_slug_17":"","task_18":"","task_slug_18":"","task_19":"","task_slug_19":"","task_20":"","task_slug_20":"","task_21":"","task_slug_21":"","task_22":"","task_slug_22":"","task_23":"","task_slug_23":"","task_24":"","task_slug_24":"","task_25":"","task_slug_25":"","task_26":"","task_slug_26":"","task_27":"","task_slug_27":"","task_28":"","task_slug_28":"","task_29":"","task_slug_29":"","task_30":"","task_slug_30":"","task_31":"","task_slug_31":"","task_32":"","task_slug_32":"","task_33":"","task_slug_33":"","task_34":"","task_slug_34":"","task_35":"","task_slug_35":"","task_36":"","task_slug_36":"","task_37":"","task_slug_37":"","task_38":"","task_slug_38":"","task_39":"","task_slug_39":"","task_40":"","task_slug_40":"","task_41":"","task_slug_41":"","task_42":"","task_slug_42":"","task_43":"","task_slug_43":"","task_44":"","task_slug_44":"","task_45":"","task_slug_45":"","task_46":"","task_slug_46":"","task_47":"","task_slug_47":"","task_48":"","task_slug_48":"","task_49":"","task_slug_49":"","task_50":"","task_slug_50":"","task_51":"","task_slug_51":"","task_52":"","task_slug_52":"","task_53":"","task_slug_53":"","task_54":"","task_slug_54":"","task_55":"","task_slug_55":"","task_56":"","task_slug_56":"","task_57":"","task_slug_57":"","task_58":"","task_slug_58":"","task_59":"","task_slug_59":"","task_60":"","task_slug_60":"","task_61":"","task_slug_61":"","task_62":"","task_slug_62":"","task_63":"","task_slug_63":"","task_64":"","task_slug_64":"","task_65":"","task_slug_65":"","task_66":"","task_slug_66":"","task_67":"","task_slug_67":"","task_68":"","task_slug_68":"","task_69":"","task_slug_69":"","task_70":"","task_slug_70":"","task_71":"","task_slug_71":"","task_72":"","task_slug_72":"","task_73":"","task_slug_73":"","task_74":"","task_slug_74":"","task_75":"","task_slug_75":"","task_76":"","task_slug_76":"","task_77":"","task_slug_77":"","task_78":"","task_slug_78":"","task_79":"","task_slug_79":"","task_80":"","task_slug_80":"","task_81":"","task_slug_81":"","task_82":"","task_slug_82":"","task_83":"","task_slug_83":"","task_84":"","task_slug_84":"","task_85":"","task_slug_85":"","task_86":"","task_slug_86":"","task_87":"","task_slug_87":"","task_88":"","task_slug_88":"","task_89":"","task_slug_89":"","task_90":"","task_slug_90":"","task_91":"","task_slug_91":"","task_92":"","task_slug_92":"","task_93":"","task_slug_93":"","task_94":"","task_slug_94":"","task_95":"","task_slug_95":"","task_96":"","task_slug_96":"","task_97":"","task_slug_97":"","task_98":"","task_slug_98":"","task_99":"","task_slug_99":"","footnotes":""},"categories":[74,72,211,29,105],"tags":[],"class_list":["post-55012","post","type-post","status-publish","format-standard","hentry","category-compliance","category-cybersecurity","category-data-privacy","category-healthcare","category-insurance"],"acf":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/posts\/55012","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/comments?post=55012"}],"version-history":[{"count":1,"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/posts\/55012\/revisions"}],"predecessor-version":[{"id":55013,"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/posts\/55012\/revisions\/55013"}],"wp:attachment":[{"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/media?parent=55012"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/categories?post=55012"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/tags?post=55012"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}