SOC 2r Report Walkthrough - Virginia Society of CPAs

Overview

This webcast will walk you through a SOC 2 report, giving you enhanced knowledge of essential information for preparing or reviewing SOC 2 reports.

Get comfortable with SOC 2 reports.
Avoid potential pitfalls. For service auditors and user entities new to SOC 2 reporting, not understanding the report contents can result in reporting deficiencies or inappropriate identification of key information.

How will this course benefit you?
This webcast presents the contents of each section of a SOC 2 report, highlighting key items of interest. As a user or user auditor, you will be better able to identify pertinent information that affects your organization or audit work. And as a service provider or service auditor, you will be better able to recognize what users are looking for and meet the requirements of SSAE No. 18.

Why take this course?
Take this course as an introduction to SOC 2 reporting, to strengthen your foundational knowledge as you perform SOC 2 examinations as a service auditor or as you review SOC 2 reports as a user entity or user auditor.

Delivery Method: Individual webcast
CPE Credit: Auditing
Program Level: Basic

This course is being offered by a 3rd party vendor and will not be accessible on your My CPE page. Webinar access information will be emailed directly to you by AICPA.

Highlights

Sections within a SOC 2 report

CUEC considerations

Inclusive versus carve-out methods of reporting on controls at subservice organizations

Report opinion types

SOC 3 reporting

Bridge letters

Prerequisites

None

Designed For

Service auditors with 0-2 years of experience

Service organization management

Users (user entities and user entity auditors)

Security managers involved in vendor management

Objectives

Recognize the sections within a SOC 2 report and responsibility for each, including complementary subservice organization controls (CSOCs).
Identify key elements when reviewing a SOC 2 report, including complementary user entity controls (CUECs) and report opinion types
Recall considerations related to exceptions, bridge letters, and SOC 3r reports.

Level

Code

Vendor

Fields of Study

Leader(s):

Jeffrey Cook, Managing Principal, Fortreum, LLC

Leader Bios

Jeffrey Cook, Managing Principal, Fortreum, LLC

Jeffrey R. Cook, CPA, CITP, CIPP, Aronson LLC, IT Audit and Advisory Group Lead Jeff Cook leads Aronson LLC’s IT Audit and Advisory Services Group as a principal consultant and is a senior manager in the Government Contract Services Group. He has over twelve years of public accounting experience with a concentration over the past nine years in government contracting and technology. Jeff is an engaging and innovative practitioner whose work experience includes IT audit support for financial statements, SOC audits, IT security compliance, as well as performing financial statement audits, reviews, and compilations. Since joining Aronson after working with a Big 4 accounting firm, he has distinguished himself as the firm’s leading IT audit and cybersecurity expert and he was instrumental in the creation and growth of the IT advisory practice. An enthusiastic learner, Jeff is passionate about innovation and always seeks to learn more about this exciting field. Jeff received his bachelor’s degree in accounting from Loyola College in Maryland. In addition to being a CPA in the state of Maryland, he is also credentialed as a Certified Information Technology Professional (CITP) and Certified Information Privacy Professional (CIPP). As an industry thought leader, Jeff speaks and writes on various IT security topics throughout the year, and is an active member of the AICPA, IMTA, ISACA and IAPP.

Return to Top