# zicula-soc2-lite-kit — free sample

Three real files from the full Security Compliance Starter Kit (25 files), each
**trimmed to taste** — enough to judge the quality, not enough to run a compliance
program on:

- `evidence-checklist-sample.md` — 4 of the 10 Tier-1 evidence items from the 24-item
  checklist (E1 signed policy pack, E6 access matrix, E7 MFA screenshots, E21 restore-test
  record), complete with the same columns as the full file: what to capture, where it
  lives, and which questionnaire question it feeds. Plus the folder-naming convention and
  the one idea the whole checklist is built on.
- `answer-bank-sample.md` — 4 of the 40 enterprise questionnaire answers (Q1–Q4: written
  policy, recognized framework, security lead, cyber insurance), each in the full bank's
  trust-building format: **direct answer → one line of how → evidence pointer**. The
  section map of the other 36 answers is at the end.
- `playbook-14d-sample.md` — Days 1–2 of the 14-day playbook, complete: how to claim the
  kit on day 1 (evidence folder, policy headers, the quarterly calendar block) and the
  day-2 "fill the master policy + make MFA real today" move. The Days 3–14 summary shows
  what the full plan adds, including the day-14 platform/audit decision.

Every sample file keeps the kit's disclaimer header — these are educational templates,
not a compliance attestation or legal advice. That disclaimer ships in every buyer file
too.

What the full kit adds (the other 22 files):

- The 8 fill-in policies (1–2 pages each, [PLACEHOLDER] fields, guidance comments, and a
  mapping table to SOC 2 common criteria and ISO/IEC 27001:2022 Annex A): information
  security, access control, incident response, data retention, vendor management, backup
  & recovery, employee security, passwords & authentication
- The full 40-question answer bank across 6 sections, with the sending rules for packaging
  a defensible reply
- The complete 24-item evidence checklist (Tier 2 + Tier 3 included) and the 90-day
  readiness rhythm
- The vendor triage guide: the 60-minute triage, what to fill vs negotiate vs decline, the
  honest "SOC 2 in progress" fallback ladder, and 3 ready-to-send reply email templates
- The ISO 27001 note (how the same evidence answers EU/DACH buyers) + the German quickstart
  (README-de), the MANIFEST file map, and the single-company commercial license
- `README-buyer.md` (the quickstart) + `SETUP.md` — every step ends with a verifiable
  "Success looks like" check
- `screenshots/` — 7 real renders of the kit's own files (no mockups) to compare your
  screen against while you work

One-time purchase $56 · free updates for v1.x · 30-day full refund.