System and Organization Controls (SOC) Reporting

Gain an understanding of what a SOC 1 and SOC 2 encompass, the general process, and the benefits of this type of report.

Many companies are being faced with the requirement to receive SOC 1 or SOC 2 reports as part of the RFP process, or perhaps it's something considered industry standard and required as a barrier of entry. Oftentimes, the thought of a security audit is not only nerve-wracking, but they also cost money. With that said, understanding exactly what type of report your organization needs and how the process should look is key to a successful audit.

This presentation will help organizations gain an understanding of what a SOC 1 and SOC 2 encompass, the general process, and who can benefit from this type of report. Additionally, we will review the composition of the report so that if you are reviewing a SOC report as part of vendor due diligence, the key portions of the report can be navigated. This presentation is critical for cloud service organizations who are either considering the need for a SOC report or being required to obtain a SOC report in the future. Additionally, this presentation can be helpful for organizations that rely on cloud service organizations for critical business processes as part of the services being provided.

Faculty

Jaclynn Finney

Linford & Company, LLP

Hilary Stavrakas

Linford & Company, LLP