SOC 2 training guide

SOC 2 Training for Individuals: What Exists and How to Choose (2026)

No one, person or organisation, becomes "SOC 2 certified". SOC 2 is an examination of a service organisation's controls, carried out by an independent CPA firm, that ends in a report, so what a person can hold is a record of training or a personal credential about SOC 2. This guide sets out the four kinds of SOC 2 training, what each suits, and what the PECB Certified Lead SOC 2 Manager course involves.

Quick answer

There is no SOC 2 certification for a person, and SOC 2 does not certify organisations either: it is an attestation examination of a service organisation's controls against the AICPA's Trust Services Criteria, performed by an independent CPA firm, that ends in a report. People take SOC 2 training to prepare for, manage or support those examinations, through one of four routes:

Professional-body education, such as the AICPA's continuing professional education on SOC engagements, aimed at service auditors, service organisation management and the users of SOC reports.
Certification-body credentials, such as the PECB Certified Lead SOC 2 Manager.
Vendor and platform training from compliance-software companies.
General audit or GRC (governance, risk and compliance) credentials, some of which include SOC reporting among other topics; check the body's published exam outline.

Last reviewed 26 October 2026

Australian prices attract 10% GST, shown before checkout.

Mindset Cyber is a PECB Authorised Titanium Partner, PECB's highest partner level.

What is a SOC 2 credential, and what is it not?

A SOC 2 report is about an organisation, never a person. The AICPA (the American Institute of Certified Public Accountants) describes a SOC 2 examination as "an examination of controls at a service organization relevant to security, availability, processing integrity, confidentiality, or privacy", and the report that comes out of it is issued by a licensed, independent CPA (a certified public accountant licensed by a US state board of accountancy, or what the AICPA calls a non-U.S. equivalent). A "SOC 2 credential" held by a person is something else: a record of training, or a personal credential from a certification body showing that the person understands SOC 2 and how to prepare an organisation for its examination.

Who can perform a SOC 2 examination and issue the report?

A licensed CPA firm, or what the AICPA calls a non-U.S. equivalent. The AICPA describes SOC as "a suite of service offerings CPAs may provide", and its logo guidelines describe a SOC report as one "issued by a licensed, independent CPA". The AICPA sets the professional standards for SOC engagements; the firms that perform them, it says, field "multidisciplinary teams composed of licensed CPAs and information technology and security specialists". Its logo guidelines for service organisations also refer to a report received "from a licensed CPA or a non-U.S. equivalent". Training providers and software tools help an organisation prepare, but the opinion in the report comes from the independent CPA.

What do SOC 2 Type 1 and Type 2 mean?

Both are SOC 2 reports; the difference is what the CPA reports on. In the AICPA's words, a Type 1 report covers "management's description of a service organization's system and the suitability of the design of controls", and a Type 2 report covers the same description and "the suitability of the design and operating effectiveness of controls". The AICPA's Journal of Accountancy, describing SOC 1 reports, puts a Type 1 "as of a specified date" and a Type 2 "throughout a specified period", and says SOC 2 is "similar to SOC 1 in that a type 1 or type 2 report is available". The AICPA's illustrative Type 2 report includes the auditor's "tests of controls and results thereof". Our SOC 2 certification guide covers the two types from the organisation's side.

What are the Trust Services Criteria?

They are the criteria a SOC 2 examination measures controls against. The AICPA publishes them as the 2017 Trust Services Criteria (With Revised Points of Focus, 2022), set by its Assurance Services Executive Committee for controls "over the security, availability, processing integrity, confidentiality, or privacy of information and systems". PECB's exam tests them in its second domain, set out below.

What does the AICPA offer individuals?

Education and, for CPAs, one credential, but never a SOC 2 report. The AICPA sells continuing professional education (CPE) on SOC engagements: self-study courses from 1 to 13.5 CPE credits, webcasts, and a two-day SOC for Service Organizations School for practitioners with substantial experience on SOC engagements, alongside its SOC 2 guide for CPAs who perform the examinations. It also sells certificate programs; its IT Governance, Risk, & Controls Certificate, for example, lists SOC reporting among its key topics. These record completed learning. For CPAs, the AICPA also awards a credential, the CITP (Certified Information Technology Professional), which lists SOC reporting among its areas and requires AICPA membership, a CPA licence or qualified equivalent, and an exam. None of them is a SOC 2 report, and the AICPA ties the issuing of a SOC report to being a licensed, independent CPA, not to finishing a course or holding a credential.

What a person can hold, and what each one shows

The SOC 2 report compared with the licences, education records and credentials a person can hold.
Item	Issued by	About	What it shows
SOC 2 report (Type 1 or Type 2)	A licensed, independent CPA firm, or a non-U.S. equivalent	The service organisation	The CPA's opinion on the organisation's description of its system and on its controls
CPA licence	A government accountancy regulator, such as a US state board of accountancy	The individual	That the person may practise as a CPA, the basis on which SOC reports are issued
AICPA continuing professional education or certificate program	The AICPA	The individual	Completed learning, recorded as CPE credits or an education certificate
AICPA CITP credential	The AICPA	The individual (a CPA or qualified equivalent)	A passed CITP exam and the AICPA's membership, licence and experience requirements, in areas that include SOC reporting
Certification-body credential, such as the PECB Certified Lead SOC 2 Manager	The certification body, here PECB	The individual	A passed exam plus the body's experience requirements for the level awarded

The table shows that only the SOC 2 report is about an organisation; everything a person can hold is a licence, a record of learning or a personal credential about SOC 2.

What kinds of SOC 2 training are there?

Four kinds, and they serve different jobs. None of them is a SOC 2 report, and none of them on its own entitles anyone to issue one.

The four kinds of SOC 2 training: who provides each, what you come away with, and who each suits.
Route	Who provides it	What you come away with	Suits
Professional-body education	Accounting bodies, such as the AICPA	CPE credits; for some programs, an education certificate; and, for CPAs, the AICPA's CITP credential, which covers SOC reporting	Service auditors who perform SOC examinations, service organisation management, and the auditors and organisations that rely on SOC reports
Certification-body credentials	Personnel certification bodies, such as PECB	A personal credential awarded after an exam, at a level set by your experience (PECB's is kept current with CPD and an annual fee)	People who plan, run or support SOC 2 readiness in a service organisation, or advise one
Vendor and platform training	Compliance-software companies	Know-how in running SOC 2 preparation in that company's product	Teams whose organisation already uses that platform
General audit or GRC credentials	IT audit, information security and GRC bodies	A broad personal credential in which SOC reporting may be one topic among several	People who want one credential that covers more than SOC 2

The table shows which side of a SOC 2 examination each route serves: professional-body education is written for the auditors who perform or rely on SOC examinations and for service organisation management, certification-body credentials and vendor training are aimed at the people who prepare a service organisation for one, and some general audit or GRC credentials include SOC reporting as one topic among several.

The AICPA describes the software behind the third route as tools "designed to improve the efficiency with which service organizations can prepare for and undergo SOC 2 examinations".

Which route fits your goal?

You want to perform SOC 2 examinations. The work sits with licensed CPA firms, so the path runs through one. Professional-body education such as the AICPA's is written for it, and the AICPA describes the firms' teams as licensed CPAs working with information technology and security specialists.
You prepare a service organisation for its SOC 2 examination. A certification-body credential built on the Trust Services Criteria matches that work. PECB's Lead SOC 2 Manager, for example, counts gap analysis, policy, risk treatment, controls and performance reporting as project experience. The AICPA's introductory SOC courses also list service organisation management among the people they suit.
Your organisation already uses a compliance platform. The vendor's own training covers its product. Check whether it also teaches the Trust Services Criteria themselves.
You want one credential that spans several frameworks. Some general audit or GRC credentials include SOC reporting among other topics; check the body's published exam outline.
You are deciding between SOC 2 and ISO 27001. The comparison further down this page matches each to the system you work on.

What does the PECB Certified Lead SOC 2 Manager course cover?

It is PECB's five-day course on establishing and implementing security measures based on SOC 2 requirements, ending in the exam for the PECB Certified Lead SOC 2 Manager credential. Mindset Cyber sells it as PECB Self-Study: the official PECB course materials on myPECB, over 450 pages of information, practical examples, exercises and quizzes, studied at your own pace without video lessons.

The PECB Certified Lead SOC 2 Manager course as Mindset Cyber sells it.
Format	PECB Self-Study: the official PECB course materials on myPECB, studied at your own pace, without video lessons.
Course materials	Over 450 pages of information, practical examples, exercises and quizzes, from PECB
Length	Five days in PECB's structure, with the exam on day five; self-paced as Self-Study, about 30 to 40 hours by our estimate
CPD credits	16, PECB's figure for Self-Study of a five-day course
Exam	80 multiple-choice questions, 3 hours, open book, 70% to pass, in English
Credential	PECB Certified Lead SOC 2 Manager, or the level your experience supports
Price	A$699 + GST (A$768.90 inc. GST)
Included	The PECB exam voucher, two exam attempts, the certification fee, the first year of PECB certification maintenance and 12 months of access

The table shows the course as we sell it: PECB's Self-Study materials and PECB's exam, with the exam voucher, a second attempt, the certification fee and the first year of maintenance in the course price.

Australian prices attract 10% GST, shown before checkout.

What the course covers, day by day

PECB's brochure sets out five days. As Self-Study you work through the same material at your own pace.

Introduction to the SOC 2 framework (day 1): information security standards and regulations, an overview of the SOC 2 framework, the Trust Services Criteria, starting the SOC 2 compliance program, analysing its requirements and defining the SOC 2 scope.
Risk management and policy development (day 2): gap analysis and remediation, risk management, documentation requirements and policy development, roles and responsibilities, and implementing controls.
Implementing SOC 2 controls and incident response (day 3): implementing controls (continued), incident management, business continuity and disaster recovery, and awareness and training.
Auditing, reporting and continual improvement (day 4): SOC 2 audit readiness and analysis, monitoring and reporting, and continual improvement.
Certification exam (day 5): the PECB Lead SOC 2 Manager exam.

PECB's main requirement for the course is general knowledge of information security practices, information systems and their security controls, compliance standards and SOC 2 principles. PECB intends it for managers and consultants, IT and information security risk professionals, compliance officers who run SOC 2 programs, audit and compliance team members working on SOC 2 readiness assessments and internal audits, executives, and security analysts and incident response coordinators.

What PECB Self-Study includes, and what it does not

PECB says Self-Study needs only "access to the PECB training course materials" and is "suitable for participants with considerable knowledge of the subject who do not require assisted lecturing". PECB makes its recorded video lessons available only in eLearning, so this course has no video lessons and no trainer-led sessions. PECB's CPD Policy (June 2026) credits Self-Study of a five-day course with 16 CPD credits, and a five-day training course or eLearning with 31, the figure on PECB's course page. Our guide to PECB eLearning vs Self-Study compares the two formats.

The exam: format and domains

The PECB Lead SOC 2 Manager exam has 80 multiple-choice questions, takes 3 hours, is open book and needs 70% to pass; PECB lists it in English. Each question has three options, and stand-alone questions are mixed with scenarios that each carry five questions. You may use a copy of the main standard, the training course materials and your personal notes from the course, in the PECB Exams app or printed. Online, the exam runs in the PECB Exams application, supervised remotely by a PECB invigilator through your camera: bring valid ID, keep phones and other secondary devices away, and be present at least 30 minutes before the start. Results of online multiple-choice exams arrive as soon as you finish. A second attempt within 12 months is included; PECB sets a 15-day wait after a failed first attempt.

PECB Lead SOC 2 Manager exam: questions per domain and what each domain measures.
Domain	Questions	Share	What PECB says it measures
1. Fundamental principles and concepts of the SOC 2 framework	11	13.75%	Comprehension, application and analysis
2. SOC 2 criteria (the Trust Services Criteria)	12	15%	Comprehension, application and analysis
3. Planning the implementation of SOC 2 requirements	25	31.25%	Evaluation
4. Implementation of SOC 2 requirements	22	27.5%	Comprehension, application and analysis
5. Monitoring of security measures and preparing for the SOC 2 certification audit	10	12.5%	Evaluation
All five domains	80	100%	45 comprehension, application and analysis; 35 evaluation

The table shows that planning and implementing SOC 2 requirements make up 47 of the 80 questions, and that all 35 evaluation questions sit in the planning and audit-preparation domains.

PECB's fifth domain says "certification audit"; in the AICPA's terms, that event is the SOC 2 examination by a CPA firm.

Credential levels and the experience each needs

PECB SOC 2 credentials and the professional experience and project hours each requires.
PECB credential	Professional experience	SOC 2 project activities
PECB Certified SOC 2 Provisional Manager	None	None
PECB Certified SOC 2 Manager	Two years, one of them in information security	200 hours
PECB Certified Lead SOC 2 Manager	Five years, two of them in information security	300 hours
PECB Certified Senior Lead SOC 2 Manager	Ten years, seven of them in information security	1,000 hours

The table shows that every level sits the same Lead SOC 2 Manager exam: your experience and logged project hours decide which credential PECB awards, and a lower level can be upgraded later. Every level also needs the PECB Code of Ethics signed, and PECB's brochure lists at least secondary education.

PECB counts these as valid SOC 2 project activities:

conducting a gap analysis on a SOC 2 program
developing an information security policy
assessing and treating information security risks
implementing SOC 2 controls
measuring and reporting SOC 2 performance metrics.

Applying for the credential and keeping it

Passing the exam does not certify you. You apply in myPECB with your professional experience, a project log and two professional references: people who have worked with you, not people you supervise or relatives. After Self-Study, PECB's handbook gives you 12 months from purchase to apply. PECB certifications are valid for three years and are kept current with CPD hours and PECB's annual maintenance fee; the first year of maintenance is in our course price.

Price and what it includes

The PECB Lead SOC 2 Manager Self-Study is A$699 + GST (A$768.90 inc. GST), including the PECB exam voucher, two exam attempts, the certification fee, the first year of PECB certification maintenance and 12 months of access. After you pay, we enrol you on myPECB by hand within one business day.

Australian prices attract 10% GST, shown before checkout.

The course, exam and inclusions are the same in every market; only the currency and tax line change:

United States: US$485
Australia: A$699 + GST (A$768.90 including GST)
United Kingdom: £367 + VAT (£440.40 including VAT)
Eurozone: €427
New Zealand: NZ$863
Canada: CA$686
India: ₹46,599

Prices for every PECB course we sell are on our PECB course prices page.

SOC 2 or ISO 27001: which suits your career?

Match the credential to the system you work on. SOC 2 is an examination under AICPA standards, performed by a licensed CPA firm, that a service organisation's customers and business partners often request; ISO/IEC 27001 is the international standard for information security management systems, and organisations are certified against it by certification bodies.

You get a service organisation through SOC 2 examinations: the PECB Certified Lead SOC 2 Manager matches that work.
You build or run an information security management system: the PECB ISO 27001 Lead Implementer matches it. It is PECB eLearning at A$699 + GST (A$768.90 inc. GST), with 31 CPD credits, and our Lead Implementer guide sets out the steps.
You audit information security management systems: the PECB ISO 27001 Lead Auditor is the audit counterpart.
Your work touches both: PECB's SOC 2 exam covers how SOC 2 maps to ISO/IEC 27001, and the two credentials can be held together.

Australian prices attract 10% GST, shown before checkout.

For how the two frameworks compare for an organisation, see SOC 2 vs ISO 27001.

Frequently asked questions

Is there a SOC 2 certification for individuals?

No. SOC 2 is an attestation examination of a service organisation's controls against the AICPA's Trust Services Criteria, performed by an independent CPA firm, and the report is about the organisation. A person can hold education, such as the AICPA's continuing professional education on SOC engagements, or a personal credential from a certification body, such as the PECB Certified Lead SOC 2 Manager. When a certification body calls its credential a SOC 2 certification, it means a credential for the person, not an AICPA report.

Who can perform a SOC 2 audit?

A licensed CPA firm: a firm of certified public accountants licensed in the US, or what the AICPA calls a non-U.S. equivalent. The AICPA, which sets the professional standards for SOC engagements, describes a SOC report as one issued by a licensed, independent CPA, and describes the firms' SOC teams as licensed CPAs working with information technology and security specialists. Training providers and software tools can help an organisation prepare, but the opinion in the report comes from the independent CPA.

SOC 2 vs ISO 27001: which is better for my career?

Neither is better in general, so match it to the work. If your job is getting a service organisation ready for SOC 2 examinations, which its customers and business partners often request, a SOC 2 credential such as the PECB Certified Lead SOC 2 Manager fits. If you build, run or audit an information security management system to ISO/IEC 27001, the international standard organisations are certified against, the PECB ISO/IEC 27001 Lead Implementer or Lead Auditor fits. PECB's SOC 2 exam covers how SOC 2 maps to ISO/IEC 27001, and the two credentials can be held together.

How long does SOC 2 training take?

PECB structures the Lead SOC 2 Manager course as five days, with the 3-hour exam on day five. As Self-Study it is self-paced: our estimate, not a PECB figure, is 30 to 40 hours, and through a PECB partner the exam, the second attempt and the certification application must all be completed within 12 months of purchase. AICPA continuing professional education on SOC ranges from a one-credit self-study course to the two-day SOC for Service Organizations School.

What is the best SOC 2 course?

The one that matches your goal; there is no single ranking. To perform SOC 2 examinations, the route is a licensed CPA firm, with accounting-body education such as the AICPA's. To prepare a service organisation for its examination, a certification-body credential built on the Trust Services Criteria fits, such as the PECB Certified Lead SOC 2 Manager. If your organisation uses a compliance platform, the vendor's training covers that tool. For one credential across several frameworks, a general audit or GRC credential fits.

Can I call myself SOC 2 certified?

Not accurately, because a SOC 2 report is about an organisation. Use the exact name of what you hold, such as PECB Certified Lead SOC 2 Manager, or describe the work, such as leading SOC 2 readiness for a named organisation.

Do I need to be a CPA to work in SOC 2?

No. Only the report has to come from a licensed, independent CPA, or what the AICPA calls a non-U.S. equivalent, and the AICPA describes CPA firms' SOC teams as licensed CPAs working with information technology and security specialists. Scoping, gap analysis, controls, evidence and monitoring inside the service organisation are done by its own people and advisers, and that is the work PECB's SOC 2 course covers.

Is the PECB Lead SOC 2 Manager exam open book?

Yes. PECB's candidate handbook allows a copy of the main standard, the training course materials and your personal notes from the course, in the PECB Exams app or printed. The exam has 80 multiple-choice questions, takes 3 hours and needs 70% to pass.

Does the PECB Lead SOC 2 Manager course include video lessons?

No. Mindset Cyber sells it as PECB Self-Study: the official PECB course materials on myPECB, studied at your own pace, without video lessons. PECB makes its recorded video lessons available only in eLearning, and describes Self-Study as suitable for participants with considerable knowledge of the subject who do not require assisted lecturing.

How much does SOC 2 training cost?

At Mindset Cyber, the PECB Lead SOC 2 Manager Self-Study is A$699 + GST (A$768.90 inc. GST), including the PECB exam voucher, two exam attempts, the certification fee, the first year of PECB certification maintenance and 12 months of access.

What is the difference between SOC 2 Type 1 and Type 2?

In the AICPA's words, a Type 1 report covers "management's description of a service organization's system and the suitability of the design of controls", and a Type 2 report covers the same description and "the suitability of the design and operating effectiveness of controls". The AICPA's Journal of Accountancy, describing SOC 1, puts a Type 1 "as of a specified date" and a Type 2 "throughout a specified period", and calls SOC 2 "similar to SOC 1 in that a type 1 or type 2 report is available". The AICPA's illustrative Type 2 report includes the auditor's tests of controls and their results.

Next steps

Enrol when you are ready, or read on about the frameworks first.

Official PECB Self-Study

PECB Certified Lead SOC 2 Manager

A$699 + GST (A$768.90 inc. GST)

Australian prices attract 10% GST, shown before checkout.

The official PECB course materials on myPECB, studied at your own pace, without video lessons. Includes the PECB exam voucher, two exam attempts, the certification fee, the first year of PECB certification maintenance and 12 months of access. 16 CPD credits.

View course → Official PECB eLearning

PECB ISO 27001 Lead Implementer

A$699 + GST (A$768.90 inc. GST)

Australian prices attract 10% GST, shown before checkout.

Recorded video lessons by PECB Certified Trainers, quizzes and the official course materials on myPECB. 31 CPD credits. Includes the PECB exam voucher, two exam attempts, the certification fee, the first year of PECB certification maintenance and 12 months of access.

View course →

Sources

Every source was read on 26 October 2026. Quotations from US sources keep their original spelling.

AICPA, System and Organization Controls: SOC Suite of Services: https://www.aicpa-cima.com/resources/landing/system-and-organization-controls-soc-suite-of-services
AICPA, SOC Logo for CPAs: Registration and Guidelines (22 April 2026): https://www.aicpa-cima.com/resources/article/soc-logo-registration-form-for-cpas
AICPA, SOC Logos for Service Organizations: Registration and Guidelines (22 April 2026): https://www.aicpa-cima.com/resources/download/soc-for-service-organizations-logo-guidelines-for-service-organization
AICPA, Talk to your clients about SOC for Service Organizations engagements (31 October 2018): https://www.aicpa-cima.com/resources/download/talk-to-your-clients-about-soc-for-service-organizations-engagements
AICPA, SOC 2 Reporting on an Examination of Controls at a Service Organization Relevant to Security, Availability, Processing Integrity, Confidentiality, or Privacy (guide updated as of 15 October 2022): https://www.aicpa-cima.com/cpe-learning/publication/soc-2-reporting-on-an-examination-of-controls-at-a-service-organization-relevant-to-security-availability-processing-integrity-confidentiality-or-privacy
AICPA, 2017 Trust Services Criteria (With Revised Points of Focus, 2022), resource page dated 30 September 2023: https://www.aicpa-cima.com/resources/download/2017-trust-services-criteria-with-revised-points-of-focus-2022
AICPA, Illustrative SOC 2 Report with Illustrative System Description (30 September 2023): https://www.aicpa-cima.com/resources/download/illustrative-soc-2-r-report-with-description-and-assertion
AICPA, former aicpa.org page "SOC 2: SOC for Service Organizations: Trust Services Criteria" (Internet Archive capture of 17 January 2022; the address now redirects to the SOC suite page): https://web.archive.org/web/20220117092350/https://us.aicpa.org/interestareas/frc/assuranceadvisoryservices/aicpasoc2report
AICPA, Journal of Accountancy, "Explaining the 3 faces of SOC" (June 2016): https://www.journalofaccountancy.com/newsletters/2016/jun/3-face-of-soc/
AICPA, FAQs: Effect of the use of software tools on SOC 2 examinations (31 March 2026): https://www.aicpa-cima.com/resources/article/faqs-effect-of-the-use-of-software-tools-on-soc-2-r-examinations
AICPA, Introduction to SOC for Service Organizations Reporting (CPE self-study course, 13.5 CPE credits): https://www.aicpa-cima.com/cpe-learning/course/introduction-to-soc-for-service-organizations-reporting
AICPA, SOC for Service Organizations Reporting Essentials (CPE self-study course, 1 CPE credit): https://www.aicpa-cima.com/cpe-learning/course/soc-for-service-organizations-reporting-essentials
AICPA, SOC for Service Organizations School: https://www.aicpa-cima.com/cpe-learning/conference/aicpa-cima-soc-for-service-organizations-school
AICPA, IT Governance, Risk, & Controls Certificate (CPE self-study certificate program): https://www.aicpa-cima.com/cpe-learning/course/it-governance-risks-controls-module-3
AICPA, CITP credential (Certified Information Technology Professional): https://www.aicpa-cima.com/cpe-learning/credential/citp-credential
PECB, Lead SOC 2 Manager course page: https://pecb.com/en/education-and-certification-for-individuals/soc2/lead-soc2-manager
PECB, PECB Certified Lead SOC 2 Manager brochure (PDF dated 30 July 2026): https://pecb.com/pdf/brochures/4/lead-soc2-manager.pdf
PECB, Candidate Handbook Lead SOC 2 Manager, version 1.5, 2026: https://pecb.com/pdf/candidate-handbooks/pecb-candidate-handbook-lead-soc-2-manager.pdf
PECB, List of PECB Exams (SOC 2 Lead Manager row updated 30 July 2026): https://help.pecb.com/list-of-pecb-exams/
PECB, Training Course Delivery Formats (modified 25 June 2026): https://pecb.com/en/pecb-training-course-delivery-formats
PECB help centre, "How do I access pre-recorded videos for eLearning Courses?" (modified 28 April 2026): https://help.pecb.com/mypecb-member/course-materials/how-do-i-access-pre-recorded-videos-for-elearning-events/
PECB, Continuing Professional Development Policy, June 2026: https://pecb.com/pdf/brochures/cpd-policy.pdf
PECB, Exam Rules and Policies (modified 17 June 2026): https://pecb.com/en/exam-rules-and-policies
PECB, Training Catalog 2026 (PDF dated 30 July 2026): https://pecb.com/pdf/catalogue/training-catalog-2026.pdf
PECB partner directory, Mindset Cyber record: https://pecb.com/en/partners?companyName=Mindset+Cyber&modal=188350
Mindset Cyber, PECB Lead SOC 2 Manager course page (format, inclusions, study-time estimate): https://mindsetcyber.com.au/professional-development/pecb-lead-soc2-manager/