Recently, a client asked if we could provide them some insight on the similarities, differences, advantages, and disadvantages of getting a SOC 2 Security versus an ISO 27001 certification.
Tag: SOC 2
What Period Is Covered In A Type II SOC Examination?
A type II SOC 1 (f. SSAE 16) or SOC 2 report (versus a Type I) is the most useful for a service organization to provide to a client. Most reports cover a 12 month period, but can be as short as six months
Need A SOC Report? How To Know Which One Is Best For Your Service Organization
A SOC (Service Organization Control) report is a report on controls at a service organization related to various types of subject matter, for example: controls that affect user entities’ financial reporting; controls that affect the security, availability, and processing integrity of the systems; or the confidentiality or privacy of the information processed for user entities’ clients.
How Long Will It Take To Get Your First SOC Report?
We hear this question all the time from new clients and prospects. How long will it take for us to prepare the required documentation for a SOC report?
Findings/Issues in SOC Reports. What Can the Impact Be?
At Linford & Company we perform many SOC 1 (f. SSAE 16) and SOC 2 engagements.
De-Identification of Personal Information
The topic of de-identification of personal information has come up in discussions with clients several times in the past year. In each scenario, our client or potential client is collecting and maintaining a store of personal information which must be protected from breach—customer records, payment card industry cardholder data, electronic protected health information (ePHI), etc. […]
SOC 2 Benefits
Obtaining a SOC 2 report requires an investment of both time and money for a service organization and, at some point, might seem like more work than it’s worth.
First time SOC 2 Audit: What to Expect
So you have begun to be asked by a current client or prospective client for a SOC 2 report.
The Advantages of Hiring a Small Firm for Your SOC Audit
At Linford & Company, we fully understand that there are all sizes of companies that complete the kind of audits we do, which include SOC 1 (f. SSAE 16), SOC 2, HIPAA and royalty audits.
Using the SOC 2 Report for Health Care Industry Assurance
In a press release dated December 17, 2015, the AICPA announced that it had collaborated with the Health Information Trust Alliance (HITRUST) to develop an illustrative SOC 2 report useful to health care industry service organizations that must demonstrate compliance with HIPAA’s security requirements