Customers of organizations that provide outsourced services of critical business functions and/or transaction processing often require the service provider (or service organization) to provide a Service Organization Control (SOC) report on an annual or recurring basis. What if a service organization outsources a portion of its business to another third-party service provider? In terms of a SOC report, the third-party service provider is referred to as a “subservice organization.” There are two reporting options with respect to how the services provided by the subservice organization are presented within the SOC report:
Regardless of the method of reporting that is used, when a service organization outsources a portion of its business, the organization must describe the services that are outsourced and the procedures that the organization uses to monitor the services provided.
Schneider Downs has a dedicated team of professionals in Pittsburgh, PA and Columbus, OH who provide SOC services. We invite you to learn more about our SOC services.
© 2014 Schneider Downs. All rights-reserved. All content on this site is property of Schneider Downs unless otherwise noted and should not be used without written permission.
This advice is not intended or written to be used for, and it cannot be used for, the purpose of avoiding any federal tax penalties that may be imposed, or for promoting, marketing or recommending to another person, any tax related matter.