System and Organization Controls

SOC2

SOC2

Achieve compliance and demonstrate your organization’s information management maturity

Achieve compliance and demonstrate your organization’s information management maturity
Red Overlay
SOC2
SOC2
Red Overlay

Achieve the gold standard in information security and data privacy controls

A SOC 2 Type II attestation report is the gold standard for service organizations seeking to provide assurance to the enterprise marketplace that their organizations, products and services have appropriate information security and data privacy controls.

BSI will help you get there through our range of audit readiness services.

How we help

We offer a variety of audit readiness services for clients who are pursuing a formal SOC report and attention. We provide assistance every step of the way to ensure clients are fully prepared for formal audit activities.

Services include:

Scoping

We work closely with client management and stakeholders to properly identify all services/solutions to be considered in-scope for the SOC report. Additionally, we work with the service organization to identify all Trust Service Principles (TSPs) to be included in the SOC 2/3 report.  

Planning

We work closely with your team to develop a customized project plan that takes into consideration all available resources (internal and external), competing initiatives, and organizational goals and objectives. 

 

Implementation

We provide assistance and project management services as necessary to support all the activities defined above

Audit and reporting

We assist clients with pre-audit and audit activities. This includes coordination with the CPA firm that will perform the actual audit. This approach allows the auditor to be completely independent and provides a clear separation of duties

BSI SOC2 services include:

  • Scoping
  • Risk assessment
  • Risk and controls matrices
  • Gap assessment
  • Policy and documentation creation

  • Mapping key policies and procedures to risk controls
  • Remediation and risk treatment assistance
  • Project management
  • Other audit readiness activities including the development of required testing procedures.     

Our expertise

  • Industry knowledge and technical expertise: Our security consultants are some of the best trained professionals in the industry. They have the leadership skills and technical know-how to help your organization build a robust controls framework.
  • Experience: Our team have assisted clients of all sizes in preparing for a formal SOC audit and report. We are there every step of the way to ensure the audit process goes smoothly and according to plan.
  • Individual certification: Our security consultants achieve and maintain a number of industry certifications including CPP, CISSP, CISA, ISO 27001 Lead Auditor, CIPM, CIPP/E, CISA and PCI ASV

More Resources