System and Organization Controls (SOC®) reporting

A SOC® report not only increases transparency, it also builds trust with customers and users. A SOC® report can also reduce time spent completing individual customer-requested audits or filling out vendor questionnaires.

System and Organization Controls (SOC®) reporting

A SOC® report not only increases transparency, it also builds trust with customers and users. A SOC® report can also reduce time spent completing individual customer-requested audits or filling out vendor questionnaires.

Connect With Us

CONTACT:
Cindy Psuik
cindyp@squire.com certification badges
CONTACT:
Ray Chipman
raymondc@squire.com

SOC 1®

A SOC 1® report is for organizations who need to report to regulators, external parties, or a customer’s auditors on internal controls over financial reporting. Typical SOC 1 reports cover employee benefit plans, third-party administrators, payroll processing, hosted software applications that produce financial data (including financial statements), and general computer controls.

calulating
meeting

SOC 2®

A SOC 2® report provides user organizations with assurance over the critical systems used to deliver outsourced services. It’s typically used by customers for vendor risk management requirements surrounding security. SOC 2® reports cover controls over security, and if applicable, availability, confidentiality, processing integrity and privacy.

meeting

SOC 3®

SOC 3® reports offer a simple, easy to understand report to enhance marketing efforts and to share with the general public. Typically, a SOC 3® report is issued in conjunction with a SOC 2® Type 2 report.

business woman
viewing computer screen

SOC® for Cybersecurity

This type of SOC® examination provides an organization’s board of directors assurance over its cybersecurity program.

viewing computer screen