Our Thoughts On

Sort by

SOC

Articles 41 - 50 of 64

Risk Advisory/Internal Audit, SOC
Timothy Wolfgang | 6.20.2018

Inclusive or Carve-Out: How Subservice Organizations Are Presented in SOC Reports

Service organizations typically use subservice organizations (i.e. third parties) to perform key controls that are necessary, in combination with the controls

Risk Advisory/Internal Audit, SOC
Timothy Wolfgang | 6.12.2018

SOC Reporting: Vendor or Subservice Organization?

Many service organizations outsource functions of their business to third-party organizations (vendors). The functions performed by vendors may impact

Risk Advisory/Internal Audit, SOC
Schneider Downs Professional | 5.3.2018

How to Address a Modified Opinion in your SOC Report

In the event that a user obtains a System and Organization Controls (SOC) Report and sees that the service auditor has modified their opinion in some way,

Risk Advisory/Internal Audit, SOC
Schneider Downs Professional | 4.23.2018

What do user entities expect to be in your SOC Report?

When a service organization engages a service auditor to perform a System and Organization Controls (SOC) report examination, it is important to note that

Risk Advisory/Internal Audit, SOC
Schneider Downs Professional | 3.22.2018

My Client/Prospective Client Just Asked for a SOC Report. Now What Do I Do?

Does anxiety and panic set in when a client or prospect asks if you have a Systems and Organization Controls (SOC) report? Could you be in jeopardy of

Risk Advisory/Internal Audit, SOC
Mark Riley | 10.5.2017

Proposed Revision of Criteria for a Description of a Service Organization's System in a SOC 2 Report

The system description of an SOC 2 report is the area in which the service organization details the system that is being assessed and the risks that are

Cybersecurity, Health Care, SOC
Schneider Downs Professional | 9.5.2017

SOC for Cybersecurity Reports: Overview and Comparison to SOC 2 Reports

The AICPA recently updated the System and Organization Controls (SOC) reporting suite of services with the releases of Statement on Standards for Attestation

Cybersecurity, Risk Advisory/Internal Audit, SOC
Gary Muggli | 8.29.2017

AICPA releases SOC for Cybersecurity Examination Guidelines

The AICPA has recently published a reporting framework for CPA firms to perform an assessment of an organization’s cybersecurity risk management

Audit, Digital & Technology, SOC
Schneider Downs Professional | 3.28.2017

AICPA SSAE 18 - Does Your Service Organization Effectively Assess the Controls Residing at its Subservice Organizations?

Many service organizations (e.g., payroll processors, data centers, facilities management companies), for reasons similar to why their clients contract

Audit, Risk Advisory/Internal Audit, SOC
Schneider Downs Professional | 2.15.2017

SSAE 18 - It's Almost Here...What Are the SOC Reporting Implications?

In April 2016, the American Institute of Certified Public Accountants (AICPA) Auditing Standards Board (ASB) issued the Statement on Standards for Attestation

This site uses cookies to ensure that we give you the best user experience. Cookies assist in navigation, analyzing traffic and in our marketing efforts as described in our Privacy Policy.