Contact a SOC 1 /2 Consultant Now

Breaking Down SOC 2 CC6.3 Requirements – Controlling Access Control

SOC 2 – CC6.3 The entity authorizes, modifies, or removes access to data, software, functions, and other protected information assets based on roles, responsibilities, or the system design and changes,

SSAE 16 and the Federal HealthCare Exchange

With the issues surrounding HealthCare.gov and the various contractors who played a role in the development, one question that comes to mind is: How many of the over 50 companies

SOC 1 Report

A SOC 1 Report (System and Organization Controls Report) is a report on Controls at a Service Organization which are relevant to user entities’ internal control over financial reporting. The

SSAE 16 Terminology – Controls at a Service Organization

Controls at a Service Organization refer to the controls that are in place at your company. Many of these controls should be covered within your policies and procedures, as they

Transition Blueprint: Navigating from SSAE 18 to the New SSAE 22

SSAE 22 was issued a couple years ago, back in December 2020, to supersede AT-C section 210 with three primary changes, apply to both SOC 1 and SOC 2: Description

SOC 1 and SOC 2: A Comparative Analysis

Some organizations have heard of SAS 70, SSAE 16, and now SSAE 18, but, haven’t seen the value, other than because one of their customer require it. Truth is, that’s

Initial Scoping and Needs Gathering

Get Our Emails

Popular Resources