Description

This session will review SOC 2, SOC 3 and SOC for Cyber Security Risk Management to assess the content and the differences between the reports; for consideration in interpreting relevance to your clients.

Learning Objectives:

• Differentiate between the basics of SOC 2, SOC 3 and SOC for Cyber Security Risk Management reports
• Interpret the SOC 2, SOC 3 and SOC for Cyber Security Risk Management reports for and understanding of EBP entities (not for direct EBP audit reliance).
• Interpret Trust Services Criteria: Security, Confidentially, Privacy Availability and Processing Integrity.
• Evaluate the extent of how auditors can review and interpret cyber security issues for client communications.

Speaker(s):

• Audrey Katcher, CPA, CITP, CISA, CGMA, Partner, RubinBrown LLP
• Lara Stanton, Director - Employee Benefit Plans, Sikich LLP

Category: Concurrent Session Onsite and Online