BARR Advisory has a proven approach that simplifies the SOC reporting processes. SOC assessments differentiate your organization by reporting on controls that increase transparency and build trust with internal and external stakeholders. During a SOC audit, BARR associates evalute the security, availability, processing integrity, confidentiality, and privacy controls implemented within your organization's AWS infrastructure to ensure that they meet the established standards for handling and safeguarding sensitive data and information.

A SOC 1 report is an examination of a service provider’s controls relevant to their client’s internal control over financial reporting (ICOFR). Formerly known as SSAE 16 and SAS 70, this report now follows the SSAE 18 attestation standard and is most applicable when the service provider performs financial transaction processing or supports a transaction processing system.

A SOC 2 examination reports on one or any combination of the AICPA’s Trust Services Criteria including Security, Availability, Processing Integrity, Confidentiality, and Privacy. It demonstrates an organization’s commitment to its customer requirements and cybersecurity best practices.

A SOC 3 report focuses on internal controls as they relate to the AICPA’s five Trust Services Criteria: Security, Availability, Processing Integrity, Confidentiality, and Privacy. SOC 3 is similar to the SOC 2 report, however, the difference lies in the details provided in each report. The SOC 3 report is shorter and does not contain the detailed controls and testing procedures.

A SOC for Cybersecurity report provides organizations with objective assurance that the appropriate systems, processes, and controls exist to manage a cyberattack, enabling stakeholders to make informed decisions.