IT Security & Compliance

System and Organization Controls (SOC) reports were created to decrease the audit burden on service providers by establishing a standardized report that can be issued to end users. A SOC examination from a reputable firm can serve as a market differentiator for organizations seeking to appeal to a broad range of high value customers. SOC 1 reports, also known as SSAE 18 reports, are designed for organizations that provide services that impact their customers’ financial statements or internal controls over financial reporting. SOC 2 reports are more technical in nature and focus on one or more trust service principles – security, availability, processing integrity, confidentiality, and privacy. SOC 2 reports are relevant to service organizations that are relied upon for the operational needs of their customers or for protecting sensitive customer data. Learn more about SOC Examinations and which SOC report is right for your organization.

Internal Controls:

• Internal Controls Assessments
• Internal Audit Outsourcing

IT Security Consulting:

Our team of experts include IT Professionals with experience managing IT and Information Security, as well as Information Security Auditors with experience evaluating companies against internal control and security frameworks. This combination of expertise allows us to truly understand our clients and their security needs and create specific tactical recommendations designed to mitigate security risk based on current threats. With expertise in both cloud-supported environments and on-premise infrastructure, security analyses and recommendations are relevant and customized to your environment. Common security areas addressed include adequacy of cloud security configurations, firewall configuration, vendor security, and employee training.