SOC 2® and SOC 3® Planning, Executing, and Reporting

New to SOC 2 reporting?

Many organizations outsource services and need assurance relevant to security, availability, and processing integrity of the systems the service organizations use to process users’ data and the confidentiality and privacy of the information processed by these systems. SOC 2 reports provide pertinent information to outsourcing organizations and their auditors to assess and address the risks and controls associated with outsourced services. SOC 3 reports provide less detail and are intended for the general public.

This course will provide you with an overview of SOC 2 and SOC 3 reporting. Patrick Morin, an experienced service auditor, will cover the basics of planning, executing, and reporting on an examination of internal controls over financial reporting at a service organization to prepare you for your SOC 2 examination.

Who Will Benefit

Service auditors, service organization management, financial statement auditors, internal auditors, and entities that outsource functions to service organizations

Key Topics

• SOC 2 report planning considerations
• Management’s responsibilities
• Evaluation and testing of controls related to financial reporting
• SOC 2 reporting matters and considerations
• Completing a SOC 2 engagement

Learning Outcomes

• Identify SOC 2 planning considerations and responsibilities.
• Recall how to execute procedures related to design and operating effectiveness of controls, and evaluate results.
• Recognize requirements for reporting and completing a SOC 2 engagement.
• Recognize differences between SOC 2 and SOC 3 reports.