SOC reports remain the gold standard for managing third party risks that arise from doing business with a service organization. The SOC 2 guide, which provides guidance to service auditors on how to perform a SOC 2 examination, is currently being updated to better reflect the effect of new technologies and new methodologies on the SOC 2 examination. This session will provide a preview of some of the more significant changes being made to the guide. |
An introduction for service auditors on how to provide third party risk assessment services. This session will define third party assessment programs, provide examples of such programs, and discuss some of the challenges working with specific third party assessment program bodies. |
This introductory session will give an overview of the SOC suite of services, including how each SOC service addresses the needs of a specific set of users. It will also recognize the differences between each SOC service. |
This session, which is based on a new AICPA toolkit, will provide considerations for practitioners considering starting new SOC practices within their firms. |
Our Profession is continuously evolving to serve the public interest by developing high quality, value-added, innovative assurance and advisory solutions. The AICPA’s Assurance Services Executive Committee (ASEC) is responsible for addressing current market needs, particularly those that arise from the use of new and emerging technologies, through the development of new assurance and advisory solutions. This session will offer an inside look into ASEC, its areas of focus, current projects, and what’s on the horizon. It will also give an overview of ways in which other teams and committees across the AICPA and CIMA support these new assurance and advisory services. |
For practitioners that are new to SOC 1 examinations this session addresses the basics, including: - obtaining an understanding of the service organization's system and relevant controls - determining whether control objectives are appropriate - evaluating suitability of design - evaluating operating effectiveness - forming an opinion in the SOC 1 report |
For practitioner's that are new to SOC 2 examinations this session addresses the basics, including: - obtaining an understanding of the service organization's system and relevant controls - understanding how the trust services criteria relate to a service organization's system - evaluating suitability of design - evaluating operating effectiveness - forming an opinion in the SOC 2 report |
This session will highlight some of the more challenging topics that service auditors may encounter during a SOC 2 examination and provide guidance on how to address those topics in accordance with standards, including:
|
Among other things, the pandemic has highlighted the importance of having effective processes and controls in place to manage supply chain issues. This session will explore some of the most important considerations to enable practitioners to assist their clients in the development of their vendor risk management programs. |
Among other things, the pandemic has highlighted the importance of having effective processes and controls in place to manage supply chain issues. This session will present an overview of the SOC for Supply Chain reporting framework and how practitioners may use the framework to provide both Advisory and Attestation services to clients. |