The setting
helps organizations, especially startups, earn and keep security certifications. Its continuously tests security controls and collects evidence for audits from the systems a company already uses.
An onboarding reply needs account context that approved guidance alone does not contain.
Catalyst preserves the account's history, while Fin's approved content protects consistency in the advice customers receive.
Who you’d be doing this for
“I sent the checklist back with two items marked done, and the reply told me to do those same two things.”
Elena Ruiz · Compliance Manager · a character in this brief
Completing a first SOC 2 onboarding while coordinating internal colleagues who need clear next steps.
What is at stake
Growth customers receive onboarding advice that repeats steps they've already completed. You must decide when AI can draft from Catalyst history and when conflicting records require the CSM to establish the next step.
Why it isn’t already fixed
Every obvious fix costs something else. That’s the part you’d have to decide.
- recent conversations vs. recorded milestones
- personalized next steps vs. consistent guidance
- broad question coverage vs. a narrow first deployment
- account detail vs. retrieval permissions
Why Vanta
A Growth book spanning roughly 150 to 170 accounts makes repeated reconstruction of onboarding history compete with attention to stalled customers.
Written with these in mind
Not your kind of problem? 22 more at Vanta, or browse every organization.
Where the organization context comes fromThe postings this brief was written from, and the reporting read before it.
The organization context comes from public information. The situation and characters are written for the brief.
Job postings it was written from
Public descriptions of the work at Vanta. They are listed as sources, not as openings. The lines under a posting are its own words, where it meets this brief.
- Technical Support Engineer (opens in a new tab)
- Located in Ireland and able to support an 8 AM–5 PM Irish Standard Time schedule, with rotating on-call responsibilities (including rotational weekends and holidays).
- Problem-solve and troubleshoot in a repeatable manner, documenting in our Support CRM to help identify trends.
- AI Agent Support Specialist (opens in a new tab)
- Systems thinking: when you see a bad answer, you ask what in the system caused it, then fix that so it doesn't happen again.
- When a support engineer answers something Fin couldn't, turn it into reusable knowledge so we only answer it once.
- VP, Success & Services (opens in a new tab)
- Create a repeatable, measurable motion spanning onboarding, implementation, and enablement through ongoing adoption, renewal, and support, and design new service offerings tightly aligned with Vanta's product roadmap.
- We help companies automate compliance, security, and risk management so they can move fast without sacrificing trust.
- Customer Success Manager - Japan (opens in a new tab)
- Guide our customers in our Growth segment through onboarding, implementation, product adoption, and value-driven success.
- Monitor and prioritize your book of business based on key indicators of customer health via Catalyst, our CS platform.
This is the setup. The work is inside.
Running it puts you in the room: the full situation and its constraints, stakeholders who push back in their own words, and the decisions that are yours to make. What you produce becomes a Day One Plan — work you can show someone instead of describing.
Where similar work appears
Other live briefs connected to this one, and what connects them.
Similar problems at other organizations
Like this one, each of these is about people starting something and never quite finishing it.
CSMs checked multiple records for 18 of 30 onboarding replies about next steps.
You decide when AI may draft a next step from Salesforce notes and when the CSM must settle whether a proposal became an agreement.
CSMs reopened account histories for 26 of 40 routine onboarding questions.
Where will you let AI draft the next step, and where must it hold for a CSM because the answer would promise someone’s work?
Enterprise CSMs must reconcile conflicting records in 17 of 40 onboarding questions.
You decide whether AI may infer a remaining step from conflicting notes, or must leave that part of the reply for the CSM.
The same setting, from another role
Each is set around Vanta’s Continuous compliance monitoring and evidence collection, written for a different role. They’re separate briefs, not the same scenario.
Vendor reviewers are rereading the same materials while approval questions keep changing.
You must weigh faster preparation against recommendations that remain traceable to approved evidence.
Uncovered controls are being managed outside the product until an auditor asks for proof.
You must weigh a fuller planning flow against clear limits on what the platform can verify.
Green controls are carrying evidence collected before an integration lost access.
You have to weigh a decisive audit signal against the risk of blocking valid work.