Readiness Assessment
$4,800
Advisory. Not an attestation.
- Gap analysis, all six criteria
- Boundary definition workshop
- Remediation plan with owners and dates
- Findings held in confidence
Service Organization Control for Knitwear
Every organization holds socks. Almost none can demonstrate custody of them. SOCK 2 defines how socks are received, paired, stored, laundered and retired, and provides the independent attestation that proves you did it properly.
Organizations spend years documenting how they handle customer data and not one afternoon documenting how they handle hosiery. The result is predictable. Pairs separate. Custody is lost. Nobody can say when, and nobody can say who.
SOCK 2 adapts the established service-organization model to the sock estate. Six Trust Services Criteria, a catalog of testable controls beneath each, and a two-tier attestation reported on by an independent service auditor.
SOCK 2 extends the original five criteria with a sixth, Pairing Integrity. The drafting committee regarded its absence from earlier frameworks as an oversight of historic proportions.
Every engagement covers SC1. The remaining five are selected in scoping and named on the face of the report.
A sock is a member of a pair, and the entity can demonstrate which one. Registers are maintained from intake through retirement. Orphaned units are recorded, not quietly discarded.
Access to the drawer is restricted to authorized parties and the perimeter is defined. Loose socks in the vehicle, under the bed, or behind the machine constitute an uncontained estate.
A matched, serviceable pair is available on demand at the committed service level. Availability is measured at the moment of dressing, not at the moment of inventory.
The wash cycle is complete, accurate, timely and authorized. Inputs reconcile to outputs. Any variance between socks in and socks out is investigated and documented.
Material defects — thinning, translucency, heel breach — are treated as confidential information and are not disclosed through the removal of a shoe in a public setting.
Personal information collected by the sock in the ordinary course of wear is retained only as long as necessary and disposed of in a manner consistent with the entity’s notice.
A Type I report is a statement of intention. Counterparties have learned to read it as one.
| Type I | Type II | |
|---|---|---|
| Reported on | Suitability of design | Design and operating effectiveness |
| Period covered | A single point in time | Three months minimum, or one full seasonal rotation |
| Pairing register | Inspected once | Sampled across the period |
| Laundry observation | Not performed | Auditor present for a representative cycle |
| Seal issued | No | On an unqualified opinion |
| Accepted by counterparties | Increasingly rarely | Yes |
| Typical timeline | 4–6 weeks | 4–7 months |
The sock estate is defined: which drawers, which persons, which households or facilities fall inside the boundary. Anything outside it is stated plainly in the report rather than ignored.
A gap analysis against all six criteria. Most first-time entities fail SC4 immediately and are surprised by it. Findings are advisory and are not disclosed to third parties.
Registers are established, the perimeter is closed, and a documented laundry procedure is put into operation. Orphaned units are reconciled or formally written off.
Controls run in production for the full window and evidence accumulates. The auditor observes at least one complete cycle end to end, including the interval between the machine and the drawer, where most losses occur.
The independent service auditor renders an opinion — unqualified, qualified, adverse, or a disclaimer. Exceptions are described in full. The seal is issued only on an unqualified opinion.
A bound report addressed to management and intended for distribution to counterparties who have asked, politely, whether you can account for your socks.
Seal artwork is released with the report and may be displayed for twelve months from the period end date.
Independent Service Auditor’s Report
We have examined the accompanying description of the sock control environment of throughout the period 1 January 2026 to 31 March 2026, and the suitability of the design and operating effectiveness of controls to achieve the related criteria set out in SC1 through SC6.
In our opinion, in all material respects, the controls were suitably designed and operated effectively throughout the period, except as described in the schedule of exceptions at Section IV.
Section IV — Schedule of exceptions (extract)
| SC1.4 | Two (2) orphaned units unreconciled at period end. |
| SC4.2 | One (1) cycle initiated without documented authorization. |
| SC2.7 | Perimeter breach: one unit recovered from a vehicle. |
S. Anklebrook
Seventy-one controls sit beneath the six criteria. A representative sample is reproduced here.
| ID | Control | Test of operating effectiveness |
|---|---|---|
| SC1.1 | Entity maintains a register of all socks within the boundary, including orphaned units. | Inspect register; recount a sample against physical inventory. |
| SC1.4 | Orphaned units are held in a designated location for no fewer than ninety (90) days before write-off. | Observe holding location; trace write-offs to approval. |
| SC2.3 | The drawer is closed when not in use. | Unannounced observation on three (3) occasions. |
| SC2.7 | Socks do not leave the perimeter other than on a foot or in a designated vessel. | Inspect vehicle, gym bag, and the region behind the machine. |
| SC3.2 | A serviceable matched pair is available at the committed service level on each dressing event. | Sample dressing events across the period; note substitutions. |
| SC4.2 | Each wash cycle is authorized in advance by a person other than the person loading it. | Inspect cycle log for authorization; test segregation of duties. |
| SC4.9 | Socks in reconcile to socks out. Variances are investigated within one (1) cycle. | Recompute reconciliation for a sample of cycles. |
| SC5.1 | Material defects are identified prior to wear and the affected unit is withdrawn. | Inspect withdrawal log; hold a sample to the light. |
| SC6.5 | Retired socks are disposed of in a manner that prevents reconstruction of wear history. | Observe disposal; confirm the unit does not reappear as a rag. |
Control language is normative. Tests are illustrative and are tailored during scoping.
Enter an entity name to confirm whether a current SOCK 2 report is on file.
Currently on the register: Heelworth & Associates · Gusset Capital · Toebox Systems · Argyle Holdings · Ribbed & Co. · Northern Instep
Readiness Assessment
$4,800
Advisory. Not an attestation.
Type II Attestation Most requested
$38,500
Three-month minimum observation period.
Type I Attestation
$14,200
Point in time. Increasingly rarely accepted.
All fees are quoted per pair of engagement partners and exclude travel to the laundry.
No. SOC 2 governs the handling of customer data. SOCK 2 governs the handling of socks. Sophisticated organizations maintain both and do not confuse them in procurement.
ISO 27001 does not address the drawer.
You may. It will not be accepted. The value of an attestation lies entirely in the independence of the party issuing it, which is the one thing self-attestation removes.
SC4, Processing Integrity. Entities reliably underestimate the interval between the machine and the drawer. It is unmonitored, it is unlogged, and it is where the estate is lost.
An orphaned unit is not a loss until it is written off. It is held in a designated location for ninety days, recorded in the register, and disposed of only on documented approval. Entities that skip this step cannot reconcile and cannot pass SC1.
The socks are real. Everything else on this website is satire — see the notice below. No attestation, assurance, audit, examination or opinion of any kind is offered or performed here.
Begin with a readiness assessment. It takes two weeks and it is not disclosed to anyone.
Request an engagement