SOC Reports

The AICPA broadened the use and purpose of SOC to go beyond Service Organizations and be applicable to all organizations that have some risk to cyber threats.   SOC stands for “Systems and Organization Controls” and here are some of the more common SOC reports:

​

• SOC 1 –  SOC for Service Organizations: Internal Controls over Financial Reporting (ICFR)

• SOC 2 – SOC for Service Organizations: Trust Services Criteria (TSC)

• SOC 3 – SOC for Service Organizations:  TSC – General Purpose Report.

• SOC for Cybersecurity

​

1st Secure Compliance, LLC CPA practice is focused on providing high quality services for SOC assessments.