top of page
TRUST & SECURITY
TRUST & SECURITY
How We Protect Client Data
Our teams collect and process infrastructure data on behalf of utilities and public agencies, including asset records, inspection imagery, GIS layers, and program documentation. That information belongs to our clients, and protecting it is part of the work.
SOC 2® TYPE 2 EXAMINATION COMPLETED
C2 Group has completed a SOC 2® Type 2 examination of our Professional Services Collaboration and Information Security System. The examination was performed by JS Morlu, LLC, an independent CPA firm, in accordance with AICPA attestation standards. It evaluated the design and operating effectiveness of controls relevant to all five Trust Services Categories.
TRUST SERVICES CATEGORIES IN SCOPE
Our Security Program
Our security program includes documented controls and operating practices designed to protect client information throughout our work.
Access Control
Access to systems and information is managed through role-based permissions, least-privilege principles, and multi-factor authentication.
Incident Response
Documented incident response procedures establish defined responsibilities, escalation processes, and response protocols.
Encryption
Client information is protected through encryption in transit and at rest, including data captured through authorized field systems.
Subcontractor review
Vendors and subconsultants are subject to documented review and oversight practices.
Personnel Screening
Personnel practices include background checks, confidentiality agreements, and annual security training.
Monitoring
System activity is logged and monitored to support the identification and review of events requiring attention.
Requesting the report
The SOC 2 report is a restricted-use document, available under non-disclosure agreement to current and prospective clients, business partners, and their advisors.
STEP ONE
Send a request
Complete the form below or email secure@c2group.us
STEP TWO
Execute an NDA
We can provide an NDA or countersign yours.
STEP THREE
Receive the report
Delivered with a current bridge letter.
bottom of page