SOC 2 CERTIFICATION – SEATTLE (WA)

Seattle and Washington business owners need to ensure sensitive data is protected, especially as it relates to financial and personally identifiable information (PII) and protected health information (PHI) (e.g., social security numbers, medical records) of customers.  Ensuring the company has robust internal controls and cybersecurity policies and practices in place to protect against a breach is essential. In fact, many may expect to see a System and Organization Controls (SOC) report before doing business with a company. This examination (often referred to as a “SOC 2 audit”) verifies that the controls, processes, and procedures have been tested and indicates whether controls are effective. 

Seattle SOC Expertise

Schneider Downs provides SOC examinations in Washington and nationwide to dozens of companies in a variety of industries. Typically, we work with organizations that use or store sensitive financial and other data that cybercriminals may want. Some examples of the clients we serve include Software-as-a-Service (SaaS) companies, data centers, IT-managed service providers, mortgage and loan servicing companies, medical claims processors, payroll companies, and inventory management and logistics providers. Our diverse range of experience permits us to understand the company more easily, its risk profile, areas of exposure, and important testing variables.

SOC 2 Examinations – Seattle (WA)

• SOC 2 Examinations – These examinations concentrate on the Trust Services Categories and Criteria for security, availability, processing integrity, confidentiality and/or privacy. SOC 2 requirements allow organizations to decide which categories to include in the scope of the examination. This flexibility means SOC 2 reports are unique to each company while providing a consistent framework to evaluate whether organizations meet the criteria for the categories they choose to include in the examination. Like SOC 1 examinations, there are two types of SOC 2 reports: Type I and Type II.
• SOC 2 Plus -These examinations include one to all five of the Trust Services Categories and Criteria, plus additional criteria for frameworks such as HITRUST, PCI, ISO 27001, NIST or other established control frameworks.