SOC3 Overview
About This Resource
What is a SOC Report? There are actually three types of SOC reports; SOC 1, SOC 2, and SOC 3. The first of the SOC reports, SOC 1, provides a formal audit of a company’s self‐imposed controls for financial transactions.
The shortfall with SOC 1 is that the relevance of the audit solely depends on the controls formulated and included by the service provider and the credibility of the auditor. With the emergence of new technology services and cloud computing entities, the need was recognized to protect against the over‐application of SOC 1 by standardizing the adherence to the industry standard Trust Services Principles, Security, Availability, Processing Integrity, Confidentiality and Privacy.
In recent years SOC 2 Type 2 has become the industry best practice for ensuring security of highly sensitive cloud‐hosted data. SOC 2 significantly expands on SOC 1 but may not be cost-effective for smaller organizations who are unable to readily meet the demands of the five Trust Services Principles and an in‐depth audit of their security protocols.
You May Also Like...
Governments Can Become Masters of Remote WFM
Pre-pandemic, state and local governments were largely resistant to adopting a remote workforce until COVID-19 pandemic hit.
Download Now
Workforce Management Software Buyer’s Guide for Government
TCP guides you through key steps to help identify what to consider and who needs to be involved when selecting WFM software for state and local governments
Fact Sheet: Payroll Integrations
TCP’s TimeClock Plus software has integrations with all the major payroll providers to expedite the payroll process.
7 Challenges Facing HR Professionals in Healthcare
Download our e-book to discover seven of the top challenges facing healthcare HR teams and some fresh ideas for addressing them.
See it in Action
See how you can empower your people with proven workforce management solutions.
Watch a Demo Video