System and Organization Controls (SOC) as defined by the American Institute of Certified Public Accountants (AICPA), is the name of a suite of reports produced during an audit. It is to be used by organizations to issue third party validated reports of internal controls over the systems used for their services. Service organizations are often required to gain SOC 2 compliance in order to partner with or provide services to other companies. SOC 2 compliant organizations can use the third-party report to prove to their customers that they have the appropriate information security in place to alleviate concerns around potential risks of doing business with them.
If your organization would like to pursue SOC 2 compliance we can work with your team to perform a gap analysis to determine where you are deficient and then work with you to assemble a roadmap on what needs to be done in order to remediate the deficiencies. One the roadmap is completed, we can even help you with remediation services or programs as well as be by your organization’s side during the audit.
)
)
)
