{
  "id": "workflow:soc2-audit-preparation",
  "_kind": "Workflow",
  "_file": "workflows/workflows/workflows-compliance.yaml",
  "_cluster": "workflows",
  "attributes": {
    "displayName": "SOC 2 Audit Preparation",
    "workflowKind": "governance",
    "triggerType": "scheduled",
    "typicalCadence": "annually",
    "complexity": "cross-team",
    "description": "Prepares evidence and controls documentation for SOC 2 Type II audit —\ncollecting access logs, change management records, incident response\nevidence, and security policy attestations. Excludes the audit itself.\n"
  },
  "outgoingEdges": [
    {
      "from": "workflow:soc2-audit-preparation",
      "to": "role:security-reviewer",
      "kind": "involves_role",
      "attributes": {}
    },
    {
      "from": "workflow:soc2-audit-preparation",
      "to": "role:engineering-manager",
      "kind": "involves_role",
      "attributes": {}
    },
    {
      "from": "workflow:soc2-audit-preparation",
      "to": "role:staff-engineer",
      "kind": "involves_role",
      "attributes": {}
    },
    {
      "from": "workflow:soc2-audit-preparation",
      "to": "skill-area:k8s-rbac",
      "kind": "requires_skill_area",
      "attributes": {}
    },
    {
      "from": "workflow:soc2-audit-preparation",
      "to": "skill-area:secrets-rotation",
      "kind": "requires_skill_area",
      "attributes": {}
    },
    {
      "from": "workflow:soc2-audit-preparation",
      "to": "domain:security",
      "kind": "applies_to_domain",
      "attributes": {}
    },
    {
      "from": "workflow:soc2-audit-preparation",
      "to": "domain:software-engineering",
      "kind": "applies_to_domain",
      "attributes": {}
    },
    {
      "from": "workflow:soc2-audit-preparation",
      "to": "responsibility:security-review",
      "kind": "triggers_responsibility",
      "attributes": {}
    },
    {
      "from": "workflow:soc2-audit-preparation",
      "to": "responsibility:run-security-scans",
      "kind": "triggers_responsibility",
      "attributes": {}
    },
    {
      "from": "workflow:soc2-audit-preparation",
      "to": "org-unit:security-team",
      "kind": "performed_by_org_unit",
      "attributes": {}
    },
    {
      "from": "workflow:soc2-audit-preparation",
      "to": "org-unit:engineering",
      "kind": "performed_by_org_unit",
      "attributes": {}
    },
    {
      "from": "workflow:soc2-audit-preparation",
      "to": "org-unit:application-security-team",
      "kind": "performed_by_org_unit",
      "attributes": {}
    }
  ],
  "incomingEdges": [
    {
      "from": "tool:jumpcloud",
      "to": "workflow:soc2-audit-preparation",
      "kind": "supports_work",
      "attributes": {
        "confidence": "medium",
        "evidence": "Identity and device controls provide SOC 2 control evidence."
      }
    },
    {
      "from": "tool-server:mcp-jumpcloud-candidate",
      "to": "workflow:soc2-audit-preparation",
      "kind": "supports_work",
      "attributes": {
        "confidence": "medium",
        "evidence": "Identity and device controls provide audit evidence."
      }
    }
  ]
}