Let’s Work Together

Get In Touch

Contact our experts for more information about SOC reports and our services.

 

Need Help Determining the Right SOC Report for Your Company?

SOC engagements have become the industry standard for examining, assessing, and reporting on controls. HAC takes this standard very seriously and aims to continually position itself as the premier provider of quality SOC reports for service organizations who aim to deliver assurance about system controls to its users and their discerning auditors.

Learn about the different types of SOC reports to determine which report is best for your company.

SOC 1® Reports

SOC 1® is a restricted use report on a service organization’s description of its internal controls over financial reporting. The report includes a detailed description of the service organization’s system, the service auditor’s opinion on the fairness of the description, suitability of design, depending on the type of SOC 1® report, the operating effectiveness of controls for the reporting period.

SSAE 16 is a common reference for this report, however it was replaced with SSAE 18 effective as of May 1, 2017. 

LEARN MORE

SOC 2® Reports

SOC 2® is designed to provide management of a service organization, user entities, and other specified parties with information and a CPA’s opinion about controls at the service organization relevant to the security, availability, or processing integrity of a service organization’s system or the confidentiality or privacy of the information processed by that system.

The report includes a detailed description of the service organization’s system, the service auditor’s opinion on the fairness of the description, suitability of design of the controls to meet the applicable trust services criteria, and in a type 2 report, the operating effectiveness of controls for the reporting period.

LEARN MORE

SOC for Cybersecurity

A reporting framework through which organizations can communicate relevant useful about the effectiveness of their cybersecurity risk management program and CPAs can report on such information to meet the cybersecurity information needs of a brand range of stakeholders.

 

Stay up-to-date

Remain informed and connected. Follow us and join our mailing list.

Savannah
Atlanta
Augusta
Miami
Tampa
Jacksonville
Orlando