Identity & Access · Audit & Attestation
Okta for SOC 2 Type II
What Okta’s data evidences toward SOC 2 Type II today, and how to connect it.
What Okta evidences here
- MFA & identity coverage feeds Logical & Physical Access
This is where Okta’s data is documented as relevant on our SOC 2 Type II page — not a pre-built, automatic control mapping. You configure which controls it maps to inside CMDash.
How you connect Okta
MFA enrolment and factor coverage, suspicious sign-in events, and the SaaS app catalog — the broadest identity signal cmdash ingests.
About SOC 2 Type II
Trust Services Criteria tracked continuously, so the evidence for your next Type II window accumulates instead of being assembled the month before.
Okta also evidences
ISO/IEC 42001:2023NIST AI Risk Management Framework 1.0NIST Cybersecurity Framework 2.0NIST Cybersecurity Framework (1.1, legacy)ISO/IEC 27001:2022CIS Controls v8.1CMMC Level 1CMMC Level 2CMMC Level 3FedRAMP ModerateHITRUST CSF v11TISAX (VDA ISA v6)SOX ITGCGDPRHIPAA Security RulePCI DSS v4.0.1DORANYDFS Cybersecurity RegulationNIST SP 800-171 Revision 3