EBP2018 - SOC 2, SOC 3 and SOC for Cyber Security Risk Management – Relevance to your Clients

Description

This session will review SOC 2, SOC 3 and SOC for Cyber Security Risk Management to assess the content and the differences between the reports; for consideration in interpreting relevance to your clients.

Learning Objectives:

• Differentiate between the basics of SOC 2, SOC 3 and SOC for Cyber Security Risk Management reports
• Interpret the SOC 2, SOC 3 and SOC for Cyber Security Risk Management reports for and understanding of EBP entities (not for direct EBP audit reliance).
• Interpret Trust Services Criteria: Security, Confidentially, Privacy Availability and Processing Integrity.
• Evaluate the extent of how auditors can review and interpret cyber security issues for client communications.

Speaker(s):

• Audrey L. Katcher, CPA, CGMA, CITP, Partner, RubinBrown LLP
• Lara G. Stanton, CPA, Director - Audit and Assurance, Sikich, LLP