ABOUT US SERVICES MEET THE TEAM CONTACT US CLIENT PORTAL MAKE A PAYMENT SOC Reports Overview PRIMARY CONTACT: Eric M. Wright CPA, CITP System and Organization Controls (SOC) reports (formerly SSAE 16, SAS 70 report) are examinations provided by CPAs in connection with system-level controls of a service organization or entity-level controls at other organizations. Business owners need to ensure sensitive data is protected, especially as it relates to financial and personally identifiable information (PII) and protected health information (PHI) of customers. Organizations also continue to face pressure from regulators and customers to demonstrate that adequate controls are in place with respect to the processing of transactions and internal controls over financial reporting. Government regulations, including Section 404 of the Sarbanes-Oxley Act of 2002 (SOX 404), Gramm-Leach-Bliley Act (GLBA) and Health Insurance Portability and Accountability Act (HIPAA) stress the need for effective internal controls. System and Organization Controls (SOC) examinations provide management with assurance regarding the effectiveness of an organization’s internal controls, while also providing insights for opportunities to improve internal controls and risk mitigation activities. Further, standard contracts typically require organizations to attest to the effectiveness of their internal controls. Obtaining a SOC report has become increasingly relevant for organizations of all sizes, as the resulting report can be provided to customers and prospective customers to demonstrate that effective internal controls and related safeguards have been implemented. Ensuring the company has robust internal controls and policies and practices in place is essential. In fact, many may expect to see a SOC report before doing business with a company. This examination (often referred to as a “SOC audit”) verifies that the controls, processes and procedures have been tested and indicates whether controls are effective. Some organizations may desire a SOC 1 examination, while others will obtain more value from a SOC 2 or SOC 3 report. Whatever the desired level of assurance, it’s important to work with an experienced provider to drive the process. Schneider Downs provides SOC examinations nationally to over 100 clients annually in a variety of industries. Our dedicated group of professionals spend the majority of their time providing services related to the evaluation, optimization and testing of internal controls and control environments in support of SOC reports, internal audit co-sourcing or outsourcing, Sarbanes-Oxley Section 404, and several other RAS practice offerings. Learn more about our practice at www.schneiderdowns.com/soc. SOC Services SOC 1 Examinations SOC 2 Examinations SOC 3 Examinations SOC for Cybersecurity SOC for Supply Chain SOC Resources Schneider Downs SOC Report Brochure Schneider Downs SOC Reports Overview Take Our free SOC Assessment Quiz Schneider Downs SOC FAQs Schneider Downs SOC Case Studies Schneider Downs SOC ‘Our Thoughts On’ Articles AICPA's SOC Report Center About Schneider Downs SOC Services Schneider Downs employs a unique approach to SOC reports, integrating the expertise of information technology, internal audit and external audit professionals. By combining cross-disciplinary knowledge and project management expertise, we are able to effectively deliver on our clients' expectations. If you are interested in learning how we can assist your organization, please contact us to get started and learn more about our practice at www.schneiderdowns.com/soc. DOES YOUR ORGANIZATION NEED A SYSTEM AND ORGANIZATION CONTROLS (SOC) REPORT? TAKE A FREE ASSESSMENT QUIZ CASE STUDIES BIG PROBLEM: LET’S DISCUSS PREVENTING RANSOMWARE ATTACKS ON YOUR COMPANY. EMAIL ME DIRECTLY HERE. BIG THINKING: COMPANY IMPACTED BY RANSOMWARE. READ MORE BIG PROBLEM: LET’S DISCUSS OPPORTUNITIES TO REDUCE YOUR COMPANY’S TAX BURDEN. EMAIL ME DIRECTLY HERE. BIG THINKING: INEFFICIENT TAX CREDIT REALIZATION. READ MORE SEE MORE CASE STUDIES MOST RECENT 2021 Retirement Plan Limitations 401(K) PLANS, PRIVATE CLIENT SERVICES, WEALTH MANAGEMENT BY DONNA WOLFSON | 11.3.2020 Review the recently released cost-of-living adjustments (COLA) as released by the Internal Revenue Service, taking effect January 1, 2021. ... READ MORE MOST POPULAR The IRS Hunt for S Corporation Compensation Underreporting BUSINESS ADVISORS BY JENNIFER DOERING | 11.8.2021 Learn more about the IRS hunt for S Corporation underreporting and hear recommendations from the TIGTA. ... READ MORE Have a question? Ask us! Have a question? Ask us! WE'D LOVE TO HEAR FROM YOU. DROP US A NOTE, AND WE'LL RESPOND TO YOU AS QUICKLY AS POSSIBLE. CONTACT US PITTSBURGH One PPG Place, Suite 1700 Pittsburgh, PA 15222 contactsd@schneiderdowns.com p:412.261.3644 f:412.261.4876 COLUMBUS 65 East State Street, Suite 2000 Columbus, OH 43215 contactsd@schneiderdowns.com p:614.621.4060 f:614.621.4062 WASHINGTON, D.C. 1660 International Drive McLean, VA 22102 contactsd@schneiderdowns.com p:571.380.9003 FOLLOW US CLIENT PORTAL SUBSCRIBE FOR UPDATES SUBMIT CONTACT US PITTSBURGH One PPG Place, Suite 1700 Pittsburgh, PA 15222 contactsd@schneiderdowns.com p: 412.261.3644 f: 412.261.4876 COLUMBUS 65 East State Street, Suite 2000 Columbus, OH 43215 contactsd@schneiderdowns.com p: 614.621.4060 f: 614.621.4062 WASHINGTON, D.C. 1660 International Drive McLean, VA 22102 contactsd@schneiderdowns.com p: 571.380.9003 FOLLOW US CLIENT PORTAL SUBSCRIBE FOR UPDATES SUBMIT 4.9 257 client ratings PRIVACY POLICY|LEGAL INFORMATION|SITE MAP Schneider Downs Consulting offers a broad spectrum of services and solutions tailored to meet the changing needs of businesses operating in today’s dynamic environment. Our practices include specialists in all facets of business consulting: transaction advisory, financial advisory, cybersecurity and IT compliance, forensic and investigative accounting, and risk management. Our integrated services are housed in a single practice, all served from within one of the nation’s most respected accounting and consulting firms. By integrating all consulting disciplines within a single integrated practice, Schneider Downs Consulting provides a single resource to help make our clients better. © 2021 Schneider Downs & Co., Inc. Maryland license number 35239