Systems and Organization Controls

Internal controls are often what stands between you and the external threats in your environment. Knowing you and the design of your controls helps us to deliver reporting services that make risk management easier. Through our full suite of AICPA Systems and Organization Control (SOC) solutions, we deliver the sound reporting that helps you and your clients understand the effectiveness of your control environment. Our understanding of your unique risks as well as the AICPA principles on which SOC reports are based ensures you have the reliable information and best practices you need to protect your valuable data.

SOC 1

We produced timely responses to requests for type 1 and type 2 SOC 1 reporting under the AICPA's Statement of Standards for Attestation Examinations No. 18 (SSAE 18). We opine on the suitability and effectiveness of the controls that affect your customers' financial transaction processing and reporting.

SOC 2

SOC 3

SOC for Cybersecurity

Insights

AICPA Introduces the SOC Report for Cybersecurity

CPAs will use the report to evaluate entities' cybersecurity risk management programs, similar to the process used to evaluate an organization's control environments in SOC 1 and SOC 2 reports.

Learn More

How SSAE 18 Will Impact SOC 1 Reports

SSAE 16, formerly under the guidance of SAS 70, is replaced by SSAE 18, which clarifies existing attestation standards, including guidance for SOC 1 engagements.

Learn More

The Challenging New Age of SOC Examinations for Software Companies

Cloud updates and other technology advances have put new pressure on most technology companies—especially Software as a Service (SaaS) companies—to streamline roll-outs of updates and new product offerings.

Learn More

Key Contact

Brenda Piazza

brendap@cbiz.com
(858) 795-2213

Systems and Organization Controls