Our PCI Guru, Jeff Hall, will be presenting at Secure360, a virtual event scheduled for May 11-12! Ask About Our PCI Services.

SOC READINESS SERVICES​

Our readiness assessment is your best preparation.

SOC Readiness Services

Get started today

SOC Readiness Services

PREPARE FOR A SOC ENGAGEMENT WITH A READINESS ASSESSMENT​

Are you new to the SOC reporting process? Auditwerx isn't.

Request a Consultation

We are no stranger to security and assessment services. Our vast experience combined with a unique “hands on” preparation method limits your guesswork and helps you to efficiently prepare for the SOC reporting process.

The SOC Readiness Assessment empowers management with the information, and the opportunity needed, to modify existing controls or institute new ones prior to the date of the SOC examination. Your Auditwerx engagement team performs an “examination before the examination” on your process from beginning to end, explains what controls should be in place at each step, and evaluates whether your existing controls are in line with best practices. This assessment is helpful for preparing for a SOC assessment, and delivers a roadmap that your business can follow to a successful SOC examination.

What type of SOC report do I need? Download our free tool.​

Readiness Assessment

The Key to a Successful SOC Engagement

Understanding Your Business & the Services You Offer

The key to completing a SOC report that will be useful to your clients is for the auditor to thoroughly understand your company’s array of service offered, and more importantly, those that are subject to the SOC examination. A SOC report should not be a one size fits all attestation. This phase of the readiness assessment narrows the focus of this process and increases efficiencies in our questions and testing, which means less time is required from your valuable staff.

Develop System Boundaries

Once the “in-scope” services are determined, the next step is to clarify both the processes and systems that support those services in order to establish the system boundaries and what is included in the SOC report. This step further narrows the focus and spotlights only those critical areas that are important to the in scope control environment while eliminating information not applicable to the scope of the report.

Identify Control Gaps, Giving You a Plan To Get Ready

Once the in-scope services, processes and systems are established, the next step is pinpointing key controls and, even more importantly, any control gaps. Control gaps consist of either controls that are not in-place (and should be) or controls that are ineffective. Identifying control gaps is critical because those gaps will need remediation. The “fix” could include a variety of things such as a new control or simply maintaining audit evidence like log files that are often purged but will need to be maintained over the reporting period.

AUDITWERX UNDERSTANDS...

 that the readiness process is vital to your organization and the successful completion of a SOC engagement. We have helped countless organizations understand their current internal measures and improve upon them. We can be your trusted ally in this process. We are a firm that has performed these procedures for many organizations across a range of industries. We will be there at every turn and fully explain the process.

Get Started

Get Started