A SOC 2 report focuses on outsourced services that could impact the security, availability, processing integrity, confidentiality, and privacy of their client's data.

This course will examine how SOC 2 reports address internal controls of service organizations and their internal controls around the security, availability, processing integrity, confidentiality, and privacy of their clients' data. Attendees will examine the criteria utilized for SOC 2 reporting and how it enables users to have an apple-to-apple comparison of their vendors or prospective vendors.

This webinar reviews the use cases and scenarios where SOC 2 reports are commonly seen across various industries. The instructor will also uncover common pitfalls encountered during the preparation phase of an audit, as well as issues that may arise during the audit itself. Join this course to review the implications of audit findings, recognize what it means if a finding is identified during the audit, and understand how that may impact the reader's interpretation of the report.

This presentation is part three of a three-part series.

Part 1: Introduction to SOC Reporting

Part 2: SOC 1 Reporting

Learning Objectives:

• Identify the purpose, use cases, and common industries where SOC 2 reports are utilized to evaluate service organizations' controls over security, availability, processing integrity, confidentiality, and privacy of client data


• Define the criteria used for SOC 2 reporting, such as the Trust Services Criteria, and how it enables consistent evaluation and comparison of service organizations across different vendors


• Determine the typical structure and contents of a SOC 2 report, the audit timeline and expectations for an organization undergoing a SOC 2 audit, potential pitfalls in the preparation process, and the implications of any audit findings identified in the report