SOC Services

SOC1

Examine and Issue Reports on Financial Reporting Controls at Service Organizations (SOC1 – Reporting on an Examination of Controls at a Service Organization Relevant to User Entities’ Internal Control Over Financial Reporting) including type 1 and type 2 reports. B&A clients provide SOC1 reports to their customers to meet their customer’s needs for information on the design and operating effectiveness of controls.

SOC2

Examine and Issue Reports on Security, Availability, Processing Integrity, Confidentiality and Privacy Controls at Service Organizations (SOC2 – Reporting on an Examination of Controls at a Service Organization Relevant to Security, Availability, Processing Integrity, Confidentiality, or Privacy) including type 1 and type 2 reports. B&A clients provide SOC2 reports to their customers to meet their customer’s needs for information on the design and operating effectiveness of controls.

SOC Readiness Assessments

Perform assessments of internal controls to determine organization’s preparedness for SOC examinations.  Assessment procedures identify controls that are in place and evaluate whether the control evidence is documented sufficiently to demonstrate compliance for a SOC examination.  Provide recommendations when gaps in controls and control documentation are identified so that the organization can effectively prepare for successful SOC examinations.