OasisLMS

SOC reporting decoded

Many organizations outsource services for various reasons. They rely on controls at those service organizations for assurance. Service organizations provide SOC for service organizations reports on internal control related to these services to give valuable information that allows users to address and assess the risks and controls associated with outsourcing.

You’ll learn the fundamentals of SOC for service organizations reporting and gain an understanding of SOC for service organizations examinations by reviewing topics, including:

• Relevant definitions
• Differences between SOC 1®, SOC 2®, and SOC 3® reports
• Applicable guidance

Learning Outcomes

• Recall key definitions related to SOC for service organizations examinations.
• Distinguish between SOC 1®, SOC 2®, and SOC 3® reports.
• Identify the guidance that is relevant and applicable to SOC 1, SOC 2, and SOC 3 reporting engagements.

Key Topics

• Purposes of SOC 1, SOC 2, and SOC 3 reports
• Differences between the reports and their intended users
• Standards relevant and applicable to SOC 1, SOC 2, and SOC 3 reporting engagements
• Common peer review findings related to SOC engagements

Who Will Benefit

Service auditors, service organization management, financial statement auditors, internal auditors, and entities that outsource functions to service organizations