Frequently Asked Questions about SOC Reports

Gain free access to answers to the questions we receive most often

As one of the region’s largest providers of high-quality service organization control (SOC) reports, we have compiled a library of responses to the questions we are asked nearly every day. We’re happy to share our insights – please take a moment to tell us a little bit about you, and we’ll provide instant access to all of our responses.

Have a question we haven’t answered? Ask us and we’ll respond promptly.

What are SOC reports?

To view answers to questions like the ones listed below, please fill out the form to the right.

What is a Service Organization?

To view answers to questions like the ones listed below, please fill out the form to the right.

Who needs a SOC report?

To view answers to questions like the ones listed below, please fill out the form to the right.

What is SSAE No. 18?

To view answers to questions like the ones listed below, please fill out the form to the right.

What are the key differences between SSAE No. 18 and SSAE No. 16?

To view answers to questions like the ones listed below, please fill out the form to the right.

What were SSAE No. 16 and SAS 70?

To view answers to questions like the ones listed below, please fill out the form to the right.

What are the Trust Services Criteria and Categories?

To view answers to questions like the ones listed below, please fill out the form to the right.

What are the types of SOC reports?

To view answers to questions like the ones listed below, please fill out the form to the right.

What are the contents of a SOC 1 and SOC 2 report?

To view answers to questions like the ones listed below, please fill out the form to the right.

What are the types of SOC 1 reports?

To view answers to questions like the ones listed below, please fill out the form to the right.

What are the benefits to a service organization in obtaining a SOC 1 report?

To view answers to questions like the ones listed below, please fill out the form to the right.

Who will use a SOC 1 report?

To view answers to questions like the ones listed below, please fill out the form to the right.

What are the types of SOC 2 reports?

To view answers to questions like the ones listed below, please fill out the form to the right.

What are the benefits to a service organization in obtaining a SOC 2 report?

To view answers to questions like the ones listed below, please fill out the form to the right.

Who will use a SOC 2 report?

To view answers to questions like the ones listed below, please fill out the form to the right.

Does a SOC 2 report have to include all trust services categories and criteria in the scope of the examination?

To view answers to questions like the ones listed below, please fill out the form to the right.

Are there different types of SOC 3 reports?

To view answers to questions like the ones listed below, please fill out the form to the right.

What are the benefits to a service organization in obtaining a SOC 3 report?

To view answers to questions like the ones listed below, please fill out the form to the right.

What is SOC for Cybersecurity report?

To view answers to questions like the ones listed below, please fill out the form to the right.

Are there different types of SOC for Cybersecurity reports?

To view answers to questions like the ones listed below, please fill out the form to the right.

What are the differences between a SOC for Cybersecurity examination and a SOC 2 examination?

To view answers to questions like the ones listed below, please fill out the form to the right.

What are the benefits of an organization in obtaining a SOC for Cybersecurity report?

To view answers to questions like the ones listed below, please fill out the form to the right.

What are the contents of a SOC for Cybersecurity report?

To view answers to questions like the ones listed below, please fill out the form to the right.

What are the contents of management's description of the entity's cybersecurity risk management program?

To view answers to questions like the ones listed below, please fill out the form to the right.

Is the SOC for Cybersecurity report appropriate for general use?

To view answers to questions like the ones listed below, please fill out the form to the right.

How does a service organization prepare for a SOC examination?

To view answers to questions like the ones listed below, please fill out the form to the right.

What is Management's Assertion?

To view answers to questions like the ones listed below, please fill out the form to the right.

Is a Type 2 report required to cover a minimum time period?

To view answers to questions like the ones listed below, please fill out the form to the right.

For what time period is a SOC report valid?

To view answers to questions like the ones listed below, please fill out the form to the right.

Will a company become “SOC certified or compliant”?

To view answers to questions like the ones listed below, please fill out the form to the right.

What is a Subservice Organization?

To view answers to questions like the ones listed below, please fill out the form to the right.

How are Subservice Organizations presented in a SOC report?

To view answers to questions like the ones listed below, please fill out the form to the right.

What is a bridge letter?

To view answers to questions like the ones listed below, please fill out the form to the right.

What options do I have if I would like to include other framework in my SOC 2 report (such as PCI, HITRUST or ISO 27001)?

To view answers to questions like the ones listed below, please fill out the form to the right.

Your Info


* required

Have a question? Ask us!

We’d love to hear from you. Drop us a note, and we’ll respond to you as quickly as possible.

Ask us

contact us

Map of Pittsburgh Office
Pittsburgh

One PPG Place, Suite 1700
Pittsburgh, PA 15222

contactsd@schneiderdowns.com
p:412.261.3644     f:412.261.4876

Map of Columbus Office
Columbus

65 East State Street, Suite 2000
Columbus, OH 43215

contactsd@schneiderdowns.com
p:614.621.4060     f:614.621.4062