Case study · Brightway Capital
Brightway Capital: SOC 2 in 90 days
Closed 47 findings and shipped a clean SOC 2 Type I report in a single quarter.
47
Findings closed
90
Days
0 reopened
Auditor questions
-22%
Cost vs benchmark
Challenge
A new institutional investor required a SOC 2 attestation in 90 days. Their existing controls were ad-hoc and undocumented.
Solution
We mapped the control universe, deployed conditional access and EDR, automated evidence collection, and walked the auditor through every control.
Results
- SOC 2 Type I delivered in 90 days
- 47 findings closed
- Investor onboarding completed on time
"Our auditors finally stopped flagging IT."
— Sasha L., CFO, Brightway Capital