Download Presentation - Plante Moran

More documents

Recommendations

Info

Preparing for a SOC Review System Description Management of the service organization is responsible for preparing the description of the service org’s system, including the completeness, accuracy, and method of presentation of the description. 16
Preparing for a SOC Review (cont.) Defining Scope of Engagement Management of the service org considers which services, business units, functional areas, or applications are likely to be relevant to its user entities. Management also considers whether the service org has any contractual obligations to provide the report to one or more of its user entities, including frequency. These may be separate entities from the service org or may be entities related to her service org. A service org that uses a subservice org may use the carve-out method or the inclusive method to present info about services provided by the subservice org in its description of the service org’s system. Determine period - SSAE No. 16 states that a type II report that covers a period of less than six months is unlikely to be useful to user entities and their auditors. 17
Page 1 and 2: Service Organizations Control (SOC)
Page 3 and 4: Introduction Many companies functio
Page 5 and 6: Service Organizations that need a S
Page 7 and 8: Benefits to User Organization User
Page 9 and 10: Reasons for New Standard Clear con
Page 11 and 12: SOC - Types of Engagements Regardle
Page 13 and 14: SOC 1 Control Objective Examples IT
Page 15: SAS 70 vs. SSAE 16 Report Date Plan
Page 19 and 20: Preparing for a SOC Review (cont.)
Page 21 and 22: Case Study - Risk Assessment Object
Page 23 and 24: During the SOC Review Types of Test
Page 25 and 26: Reporting Types of Opinions Unqual
Page 27 and 28: Management Assertion (additional re
Page 29 and 30: SOC Seals & Logos There are three

Download Presentation - Plante Moran

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?