Service Organization Reports
Read the overview below and complete the activities that follow.
Service organizations need to have their controls reviewed by auditors. For example, service organizations that provide
data processing services to various clients need to have their controls reviewed by auditors so that the client's auditors
can satisfy themselves that control is being adequately maintained relative to the processing of client data by an external
source.
CONCEPT REVIEW:
Often service organizations have their auditors, called service auditors, study their systems of internal control and issue a
service auditor's report.
A Type
report assesses the controls and their suitability.
A Type
report assesses the controls, their suitability, and operating effectiveness.
auditors are the auditors of a service organization.
There are
types of SOC reports that auditors of service organizations can provide.