SOC Examinations
To compete in today’s marketplace, your customers must have trust and confidence in your environment. Providing SOC reports on an annual basis can deliver an additional level of assurance to your clients.
-
Read ArticleHow to Maximize your SOC Report
SOC reports don’t have to be "routine"—maximize your report's value using the SHARPE method. Schellman Director Rob Tylka provides an overview
-
52:52Watch VideoSOC for Supply Chain
-
Read ArticleEnergyTech Insights (Part 2): Cybersecurity Risk Management in the Energy Services World
In Part 2 of our EnergyTech series, Schellman's Grayson Taylor discusses the proactive approaches energy services entities (ESEs) are taking to manage cybersecurity risk and data protection.
-
Read ArticleCue Internal Audit – Stage Right
The secret to a flawless, stress-free SOC examination experience? Utilizing your company's internal audit team. Schellman's Edward Delgado provides an overview of this invaluable resource.
-
2:54Watch VideoSOC for Supply Chain
-
Read Flipbook
COVID-19 and SSAE 18
-
Read ArticleCOVID-19 and SSAE 18: What Does This Mean for Your SOC Preparedness
Hopefully this writing finds you well and adjusting to perhaps the most serious health-related situation in many a lifetime. Perhaps it may find you contemplating preparedness in specific ways.
-
53:04View the WebinarSOC 2 and ISO 27001: Compliance in Harmony
-
53:49Watch VideoRisk Assessment Requirements for SOC Reporting
-
52:00Watch VideoSOCratic Method: SOC 1, SOC 2, and SOC 3
-
3:20Watch VideoSOC 2: Should I Merge?
A Buck For Your Thoughts - Episode 002
-
Read ArticleUtilizing SOC Examinations to Help with Vendor Management
You most likely selected the link to this blog to discover one of two things: 1) how to effectively manage vendor requirements via SOC reports or 2) what the SOC 1/SOC 2 examination...
-
Read FlipbookSOC 3 Overview
-
Read FlipbookSOC 2 Overview
-
Read FlipbookSOC 1 Overview
-
Read ArticleClearing Up The Confusion - Type 1 vs Type 2 and the Value Proposition
It may come as a bit of a surprise—maybe not—but there are actually two types of SOC reports. Upon examination, the service organization is responsible for specifying whether or not a...
-
1:00:55Watch VideoSSAE 18 and Other Famous Acronyms - Encore
As SSAE No. 18 is now effective as of May 1st, organizations and their customers will have uncertainty in what the new standard means and how it will affect their SOC 1 reports.
-
Read ArticleSOC 2 But Not SOC 2+HITRUST?
Can my organization successfully complete a SOC 2 but still not successfully complete a SOC 2 + HITRUST?
-
Read ArticleNot A Game of Eeny, Meeny, Miny, Moe: Do Data Centers Need a SOC 1 or SOC 2?
The first question many service organizations have when they begin the process of researching Service Organization Control (SOC) reports is: which SOC report(s) do they need? The American...
-
Read ArticleWEBINAR: SOC 2 and You: Overview and Update
Increasing concerns regarding information security have heightened scrutiny of service organizations’ control infrastructure and driven demand for attestation reports. As a result, the SOC 2...
-
Loading More...
