SOC 1 vs SOC 2 Audit Reports
Our firm has spent a fair amount of time discussing the differences between SSAE 16 (SOC 1, formerly SAS 70) and AT 101 (SOC 2) audit reports with many individuals from a significant number of companies in a variety of industries. So what are the differences? In short, the structure and the content of the reports are not significantly different; it is the recipients of the reports that are...
Read MoreSAS 70, SSAE 16, AT 101, SOC 1, 2, 3, SysTrust and WebTrust. Good Luck.
Recently, the AICPA has started referring to SSAE 16 reports as SOC 1 reports. SOC stands for service organization control reports. Not to be confused with SOX, which most know is an acronym for the Sarbanes-Oxley Act of 2002. In any case, the AICPA is trying to simplify the many different types of reports service organizations can receive by using the terms SOC 1, 2, and 3 in addition to...
Read More