Description
Gain an understanding of what a SOC 1 and SOC 2 encompass, the general process, and the benefits of this type of report.
Many companies are being faced with the requirement to receive SOC 1 or SOC 2 reports as part of the RFP process, or perhaps its something considered industry standard and required as a barrier of entry. Oftentimes, the thought of a security audit is not only nervewracking, but they also cost money. With that said, understanding exactly what type of report your organization needs and how the process should look is key to a successful audit.
This presentation will help organizations gain an understanding of what a SOC 1 and SOC 2 encompass, the general process, and who can benefit from this type of report. Additionally, we will review the composition of the report so that if you are reviewing a SOC report as part of vendor due diligence, the key portions of the report can be navigated. This presentation is critical for cloud service organizations who are either considering the need for a SOC report or being required to obtain a SOC report in the future. Additionally, this presentation can be helpful for organizations that rely on cloud service organizations for critical business processes as part of the services being provided.
Date: 2023-07-14 Start Time: 1:00 PM ET End Time: 2:40 PM ET
Learning Objectives
* You will be able to explain what is included within a SOC 1, SOC 2, and SOC 3 report.
* You will be able to describe the type of SOC report required for your organization.
* You will be able to identify which trust services criteria could be in scope at your company.
* You will be able to review a SOC report as part of your vendor management responsibilities.