Terms
- AICPA
- CMMC
- Compliance Risk Management
- Compliance Automation Software
- Cybersecurity
- FedRAMP
- GDPR
- GRC
- HIPAA
- HIPAA Employee Training
- HIPAA Rules
- HIPAA Breach
- ISO 27001
- ISO 27001 Security Standard
- IT Security Policy
- Protected Health Information
- Risk Assessment
- Security Questionnaire
- SOC 1
- SOC 2
- SOC 2 Auditor
- SOC 3
- SOC Reports
- Trust Services Criteria (TSC)
- SSAE 16
- SSAE 18
- Vendor Assessment
- Vendor Management Policy
- Vendor Review
- Vulnerability Management
What is a SOC 2 Auditor?
To obtain a SOC 2 audit and report, an organization's security measures must be reviewed and verified by a certified auditor. Only licensed CPA firms can perform a SOC 2 examination.
SOC auditors are independent CPAs who work with the SOC (System and Organization Controls) suite to evaluate and report on the controls in place at a service organization, relevant to a set of criteria known as the Trust Services Criteria: Security, Availability, Processing Integrity, Confidentiality, or Privacy. A SOC 2 auditor's independent verification of an organization's security systems is intended to help service organizations provide their customers and prospects with valuable information about how they manage data and information security.
Working with a CPA and certified SOC 2 auditor is a key part of obtaining a SOC 2 report.
Subscribe & receive the latest content.
Get Started Today
Close more sales and build trust faster while eliminating the hundreds of hours of manual work that used to go into maintaining your SOC 2 report.
