Control LogicsTampa, FL, USA
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for SOC for Cybersecurity, ISO 27001, SOC 2, HIPAA, GDPR and more.
- Standards
- Pricing
- Not published
SOC for Cybersecurity
SOC for Cybersecurity is an AICPA examination in which a CPA reports on an organization's enterprise-wide cybersecurity risk management program rather than on a specific service delivered to customers. It was introduced in 2017 and is the one SOC examination designed for any organization, not just service providers.
The report is general use and can be shared with boards, investors, insurers, regulators and business partners.
The organization must write a description of its cybersecurity risk management program that satisfies the AICPA description criteria (nature of the business, information assets, governance, risk assessment, control processes, monitoring), and it must select control criteria (commonly the Trust Services Criteria, but NIST CSF or ISO 27001/27002 are permitted) against which the CPA evaluates whether the controls were effective.
Written governance, risk assessment and control documentation is therefore the backbone of the engagement.
Share
Ad from the publisher
SOC
help
help
Consultants Assessors Quotes
Matched3 quotesone form
The Shortlist is Yoursfrom this directory
Comply the Modern WayFind help with SOC for Cybersecurity
01
Listings sourced
A card shows a public register or the date we read the firm’s website
02
Published prices where they exist
“Quote only” where we confirmed it, “Not published” where we have not
03
Up to three quotes, one form
Firms don’t see you until you choose
House ad. This slot is open to firms listed for this page.
Get help →Advertise here →
Who has to comply
Voluntary. Used by organizations that want independent assurance over the whole security program to show boards, investors, cyber insurers or customers. No statute or contract standard requires it by name.
What the assessor asks to see
Program description written to the description criteria; management assertion; governance documents (board reporting, policies, roles); risk assessment and asset inventory; control inventory mapped to the selected control criteria; evidence of control operation over the period (access reviews, vulnerability management, incident records, awareness training, vendor management); monitoring and remediation records.
Who helps with SOC for Cybersecurity
A readiness ecosystem exists among cybersecurity advisory firms and CPA advisory arms: drafting the program description to the description criteria, mapping controls to the chosen control criteria, running gap assessments and preparing evidence. Engagements typically run a readiness phase then the examination.
Firms that name this framework in their own material. A listing is not a recommendation. Each firm can confirm its own.
Listed in random order, reshuffled each time the page loads. Firms that pay for a listing are shown at the top, labeled Sponsored.
Who assesses SOC for Cybersecurity
A licensed CPA firm performing the examination under the AICPA attestation standards. Accredited by State board CPA licensure and the AICPA peer review program. No scheme-level accreditor.
Assessors
Be the first SOC for Cybersecurity assessor listed here
This page is read by the organizations looking for someone to certify them.
Tools for SOC for Cybersecurity
Tools that name this framework in their own material.
Tools
Be the first tool listed for SOC for Cybersecurity
Buyers comparing software for this standard land here first.
Related reading
- Cybersecurity: a new engagement opportunityExplains the description criteria and control criteria behind the examination and how it differs from a SOC 2.Journal of Accountancy
- New opportunities for firms in SOC reportingUseful on why practitioner supply is thin and what expertise a firm needs before it can run these engagements.Journal of Accountancy
Independent third-party explainers, chosen by hand. Not affiliated with this site and not paid placements. All links are nofollow.
Need a hand implementing it?
Find a Consultant for SOC for Cybersecurity
Tell us what you need done and we will point you to firms that do this work. Your details go to a firm only when you choose it.
Not sure where to start?
Get Help with SOC for Cybersecurity
Tell us what you are trying to put in place. We will point you to the right tool, a consultant who can implement it, or both.