SOC

Service Organization Controls Reporting

 
 

SOC 1

A System and Organization Controls for Service Organizations: ICFR or SOC 1 report is an examination of controls at a service organization that are likely to be relevant to user entities’ internal control over financial reporting. SOC 1 reports, are specifically intended to meet the requirements of the entities that use service organizations and those entities’ financial statement auditors.

By obtaining a SOC 1 attestation report that is performed by a third-party CPA firm, not only are you providing an increased level of confidence to your clients but also adding significant value to your service organization. A successful SOC 1 audit will differentiate your organization from your competitors by demonstrating the establishment of an effective control environment and a commitment to the security of your client’s data and confidential information. 

SOC 2

A System and Organization Controls for Service Organizations: Trust Services Criteria or SOC 2 report is an examination of controls at a service organization relevant to security, availability, processing integrity, confidentiality, and privacy. Unlike a SOC 1 report which only examines a service provider’s controls that may affect their clients’ internal control over financial reporting, a SOC 2 report focuses on objectives that impact the client’s operational controls as they relate to security, availability, processing integrity, confidentiality, and privacy.

SOC 2 reports inform your clients and their auditors that your organization has accurately described its systems and controls, that the described controls are in place, and that the controls are designed to accomplish the stated control objectives.

Secured.png

How Infina Can Help

Infina helps our clients prepare for their SOC examinations and can work directly with your selected auditor to demonstrate how your controls are designed and operate.

Our primary SOC 1 & 2 services include:

•    Scoping and Planning
•    SOC Readiness Assessment
•    Control Implementation & Remediation
•    Training
•    Audit Examination Support