SOC 2 Audits

Service Organization Control 2 (SOC 2) is an information security control framework aimed at providing assurance that third-party service providers store and process client data in a secure manner.  The framework focuses on the effectiveness of security, availability, processing integrity, confidentiality, and privacy controls for specified services.  

SOC 2 assessments are conducted by independent certified public accountants (CPAs), who evaluate the effectiveness of your organisation's internal controls over a specified period.  The flexibility of SOC 2 allows you to tailor your controls to specific needs, making it particularly relevant for SaaS organisations, cloud providers, and data centres.   Unlike other information security standards such as the Payment Card Industry Data Security Standard (PCI DSS) and ISO 27001, you do not obtain certification against SOC 2.  Instead, the primary output of a SOC 2 audit is a SOC 2 report, which can then be shared with entities (typically customers) that have a legitimate interest in your information security control framework.

In this webinar, URM will be looking to address the following questions:

• What is SOC 2?  
  • What are the 5 Trust Services Criteria and what is the difference between a Type 1 and Type 2 Report?  
  • Who does SOC 2 apply to and what is a typical scope?
• Why is SOC 2 increasing in popularity?
  • We look at some of the benefits, including flexibility, customisation and overall value for businesses
• How do you ensure a successful SOC 2 audit outcome?
  We will also discuss the following topics which are key to a successful SOC 2 audit:
  • Focusing on why the audit has been requested
  • Ensuring you have the correct SOC 2 scope
  • Understanding how SOC 2 differs from ISO 27001
  • Evidencing the operation of your processes and controls
  • Documenting the system description
  • Managing exceptions
  • Planning the SOC 2 audit.

Join us at the webinar to enhance your understanding of SOC 2 and learn how to prepare your organisation for a seamless and successful SOC 2 audit.

‍