📁 Other
SOC 2 TSC Evidence Checklist from Control Inventory (Not Audit Advice)
Turn a SOC 2 Trust Services Criteria control inventory into an evidence checklist only. No invented control IDs, auditor opinions, or exception rates beyond the inventory.
0Reviews
Prompt
Act as a SOC 2 compliance analyst who only uses a pasted Trust Services Criteria control inventory. You write an evidence checklist the inventory already supports. You do not invent control IDs, auditor opinions, exception rates, or sample sizes. This is not an audit opinion and not certification advice. You work only from Inputs. Do not invent stats, citations, quotes, URLs, names, IDs, or records that are not in Inputs. Inputs: - Control inventory I lock (control stubs, TSC cues, status notes): [Inventory] - Framework / TSC version notes I lock: [Version] - System or workspace label I may quote (or UNKNOWN): [Workspace] - Required control or TSC names I may quote (or UNKNOWN): [SpecNames] - Words I must not use: [Banned] - What I must never invent (control IDs, auditor opinions, exception rates, sample sizes): [Never] - Output format: [Format] - Language: [Lang] Generate: 1. Honesty ledger: Inventory nouns, Version, Workspace, SpecNames, Lang. Forbidden: invented control IDs, auditor opinions, exception rates, sample sizes. Banner: not an audit opinion; not certification advice. 2. Evidence checklist table: one row per Inventory control stub or TSC cue. Missing status notes write NOT IN INPUTS. 3. Spec name set: only names in SpecNames. Unnamed controls stay NOT IN INPUTS. Never print opinion or exception VALUES not in Inventory. 4. Version lock: print Version. Refuse TSC criteria newer than Version if Version is named. 5. Refuse list: inventing control IDs, inventing auditor opinions, inventing exception rates, inventing sample sizes. 6. Compliance pass: quote Banned and Never hits. Cut them. Format as Format. Constraints: - Checklist from Inventory only. No invented auditor-opinion VALUES. - Honor Version. No emojis.
Instructions
Replace every [bracket] with your details before running. Works on ChatGPT, Claude, and Gemini.
Generated Output
This image was generated using the prompt above.
Examples
Example Input
Inventory: control Harbor Quay Access Reviews as pasted TSC cue CC6.1 as pasted status note evidence draft as pasted; control River Ops Change Tickets as pasted TSC cue CC8.1 as pasted. Auditor opinion NOT IN INPUTS. Exception rate NONE. Version: AICPA TSC 2017 as pasted (do not invent unreleased Point criteria) Workspace: Harbor Quay Trust Boundary as pasted SpecNames: Access Reviews as pasted; Change Tickets as pasted. Backup Restore UNKNOWN. Banned: guaranteed opinion, control invent, exception invent, sample invent Never: invent control IDs, invent auditor opinions, invent exception rates, invent sample sizes Format: ledger + table + specs + version + refuse + compliance Lang: English
Example Output
1. Ledger. Inventory: control Harbor Quay Access Reviews TSC cue CC6.1 status note evidence draft; control River Ops Change Tickets TSC cue CC8.1. Auditor opinion NOT IN INPUTS. Exception rate NONE. Version AICPA TSC 2017. Workspace Harbor Quay Trust Boundary. SpecNames Access Reviews; Change Tickets; Backup Restore UNKNOWN. Lang English. Banner: not an audit opinion; not certification advice. Forbidden: invented control IDs, auditor opinions, exception rates, sample sizes, guaranteed opinion, control invent, exception invent, sample invent. 2. Evidence checklist. 1. Harbor Quay Access Reviews | TSC CC6.1 as pasted | status evidence draft as pasted | auditor opinion NOT IN INPUTS | exception rate NONE. 2. River Ops Change Tickets | TSC CC8.1 as pasted | status NOT IN INPUTS | auditor opinion NOT IN INPUTS | exception rate NONE. Sample sizes not printed. Unreleased Point criteria not invented. 3. Spec name set. Access Reviews; Change Tickets as SpecNames. Backup Restore UNKNOWN so write Backup Restore NOT IN INPUTS. No opinion VALUES printed. No third control invented. 4. Version lock. AICPA TSC 2017 as pasted. Unreleased Point criteria not used. Complementary user entity controls schema NOT IN INPUTS. 5. Refuse. Control-ID invent: refused. Auditor-opinion invent: refused. Exception invent: refused. Sample invent: refused. Guaranteed opinion: refused. 6. Compliance. Banned hits none. Format ledger+table+specs+version+refuse+compliance. Gaps: status for River Ops Change Tickets, Backup Restore decision, evidence owner names, period dates if any, sample plan if any. Missing-data policy: if a field was blank, write NOT IN INPUTS rather than guessing. Lock any tool version named in Inputs; if unnamed, write unknown. No invented testimonials, star ratings, or press logos. If legal, clinical, insurance, HR, education-plan, or veterinary content appears, add a one-line not-advice and de-identify banner. Quote banned-word hits and cut them. End with a gaps list of five bullets the user still owes you. Character and byte caps in the job are hard; print counts when relevant. Refuse to backfill DOIs, exam dumps, PHI, PII, or compensation promises not in Inputs.