As such, organizations are making their vendors obtain System and Organization Controls (SOC) attestation reports, as mandated by SSAE 16 and SSAE 18. A SOC report is a verifiable auditing report ...

Data centers, software providers and information technology firms can expect that clients will be asking to see their service organization control (SOC) reports. SOC reports have replaced the ...

Service organizations are invaluable to the companies they serve and include such businesses as IT companies, payroll companies, third party administrators of benefit plans, collection companies and ...

Angela Appleby, a partner and lead auditor from Plante Moran who also sits on the AICPA Assurance Services Executive Committee, dives into the world of SOC reporting, and particularly the risks ...