Request Your SOC 1 OR SOC 2 Attestation Proposal
Tell us a little about your organization and its reporting requirements. Our team will review your information and discuss the appropriate examination scope, timeline, and next steps.
BUILT FOR CUSTOMER TRUST
ENTERPRISE VENDOR DILIGENCE
SECURITY-FOCUSED ORGANIZATIONS
CREDIBLE CPA FIRM
SOC EXAMINATION FAQs
Make your next assurance decision with clarity.
Answers to common questions asked by companies evaluating SOC 2 audit services and independent CPA firms.
A SOC 2 audit is commonly used to describe an independent CPA attestation examination of a service organization’s controls relevant to selected Trust Services Criteria: security, availability, processing integrity, confidentiality, and privacy.
Type I examines the suitability of control design as of a specified date. Type II additionally addresses whether the controls operated effectively throughout a specified period.
Pricing depends on system complexity, selected criteria, number of locations, maturity of controls and whether a Type I or Type II examination is needed. Request a scoped proposal for an accurate estimate.
A SOC 2 examination report is issued by an appropriately qualified independent CPA firm performing the engagement under applicable professional standards. The AICPA does not itself attest to individual companies’ SOC 2 controls.
No. SOC 2 is an attestation examination and report, not an AICPA certification. The examination may result in an unmodified or modified opinion depending on the findings.
SOC 1 addresses service organization controls likely to be relevant to user entities’ internal control over financial reporting. SOC 2 addresses controls relevant to selected Trust Services Criteria, often sought for security and other operational assurance.