Original Source: MIS|IT Training Institute
“Companies that outsource payroll, healthcare processing, and other processes containing PII can obtain a SOC 2 report. Based on the AICPA’s WebTrust principles, a SOC 2 report is an independent certification of outsourced service providers (OSP) non-financial reporting controls, including security, processing, confidentiality, and privacy controls. The OSP (i.e. third party) engages a firm to perform the attestation (audit), and then provides the detailed audit results to any interested customer…”
Contributors: Open SourceCategories: Industry Articles, SIG U Resource
SRC Type: Risk Management, Sourcing Management, Third Party Management