The Devil is in The Details: How To Be Successful In Cross Compliance Framework Alliance
This session will review tactics to be successful in implementing a control environment that aligns with multiple security frameworks. The session will review common use case, pitfalls organizations find themselves in as well a review of successful case studies. We will discuss the role of compliance platforms in the process and at the end of the sessions, participants will understand what an auditor needs to do to make this successful as well as what the organization needs to do to be successful in implementing a control environment aligned with multiple frameworks.
This session will highlight any Independence and Peer review insights as they relate to SOC.
This session will help enhance understanding the use of SOC 2 reports to support trusted reliance on third parties. We will cover ways clients can differentiate their SOC reporting.
Risk assessments have been a primary focus area for firms as well as peer reviewers. Assessing risk is a continual process through an engagement life cycle (from client acceptance to planning to evaluating the results). This session with strive to answer three questions: What is a risk assessment? Why do we keep talking about it? And…where do you start?
This session will discuss the updates that have been made to the SOC 1 guide, and address the basics of SOC 1 engagements, including:
- obtaining an understanding of the service organization's system and relevant controls
- determining whether control objectives are appropriate
- evaluating suitability of design
- evaluating operating effectiveness
- forming an opinion in the SOC 1 report
With the growing pool of GRC and "SOC automation" tools entering the market, SOC practitioners are eager to understand the impact on SOC engagements. In this session, we will discuss the good, the bad, and the potentially non-conforming aspects of engagements that utilize these tools.
The AICPA’s Assurance Services Executive Committee (ASEC) is responsible for addressing current market needs, particularly those that arise from the use of new and emerging technologies, through the development of new assurance and advisory solutions. This session will offer an inside look into ASEC’s current projects including Cybersecurity, SOC Reporting, ESG, Digital Assets, and other emerging areas.
This session with explore the requirements and best practices related to vendor management - both for companies and for the reviewing of what is done for SOC engagements. We will explore issues that companies face related to vendor management and how to overcome those issues or risks during the SOC engagement.
Over the past several years, the AICPAs SOC school has been a key point of interaction between SOC practitioners across the globe, from new associates to senior partners. Through the dialogue that occurs during the SOC School, its instructors get an invaluable glimpse into the common questions among practitioners and the areas of guidance that are often unknown or misunderstood. Hear from one of these instructors as we revisit the most commonly asked SOC School questions and explore the guidance-based answers.
This session will grant attendees the opportunity to bring forward questions relevant to matters of SOC and Third-Party Risk. All topics are fair game; our panel of experts will facilitate dialogue and deliver answers on the spot.