Charlotte SOC 2 Audits
McKonly & Asbury provides SOC audits to companies in Charlotte and North Carolina and beyond. Typically, we work with organizations that use or store sensitive financial and personal data that cybercriminals want. Our clients include data centers, loan servicing companies, insurance companies, medical claims processors, payroll providers, and more. Broadly, any organization that provides services to customers that directly impact the customer’s financial statements would be a candidate for such a report. Service organizations should evaluate their needs along with their customers’ reporting needs prior to determining the type of SOC report that is applicable to their needs. There are two types of SOC 2 audits:
- SOC 2 Type I – A SOC 2 Type I report is an opinion on management’s description of a service organization’s system and the suitability of their design of controls that meet the AICPA’s Trust Service Criteria for Security. It can also address Availability, Processing Integrity, Confidentiality, and/or Privacy, depending on the requirements of your customers. The report is made up of the auditor’s opinion, management’s assertion on the presentation and design of the controls, a description of the service organization’s systems and controls, and a listing of the organization’s controls. The SOC 2 Type I audit report differs from the SOC Type II in that the former covers ONLY the suitability of the design and addresses ONLY at one specific point in time.
- SOC 2 Type II – A SOC 2 Type II report is an opinion on management’s description of a service organization’s system and the suitability of the design and operating effectiveness of controls that meet the AICPA’s Trust Service Criteria for Security. Similar to a SOC 2 Type I, this report can also address Availability, Processing Integrity, Confidentiality, and/or Privacy, depending on the requirements of your customers. A SOC 2 Type II audit report contains the same core components as a Type I, but Type II is expanded to include the procedures used by the auditor to test the stated controls and the results of such tests over a defined period, rather than a single point in time.
Additional Healthcare Solutions
McKonly & Asbury also has extensive experience with HIPAA regulations. Learn more about how we can support your security and privacy needs on our HIPAA Compliance page.