Payroll. Payment processing. Loan servicing. Claims processing. Financial data. When the services you provide can affect a customer's financial reporting, you may be asked for a SOC 1 report.

A SOC 1 audit provides independent assurance over the controls relevant to those services, giving your customers and their auditors information they can use in evaluating their own financial reporting controls.

TrustBridge defines the scope and report type with you at the outset, so you know what's being evaluated, what we'll need from your team and what comes next.

SOC 1 Type 1 or Type 2?

The right report depends on what your customers and their auditors need.

Point in time

Type 1

Evaluates whether relevant controls are suitably designed at a specific point in time.
Over a period

Type 2

Evaluates both the design and operating effectiveness of those controls over a specified period.

For some organizations, the requirement can be addressed with a Type 1 report. Others need a Type 2 report that demonstrates how controls operated over time. TrustBridge works with you to determine the appropriate report and scope before the examination begins.

Focus the Audit on What Counts.

A SOC 1 audit focuses on the services, systems and processes that could affect your customers' financial reporting. The scope depends on what you do, how you deliver those services and which controls your customers and their auditors rely on.

Depending on your organization, the audit may include:

Transaction processing
Access to systems and financial information
Data processing and system interfaces
Change management
Reconciliations and reporting
Business and IT controls relevant to financial reporting

Establishing the scope at the outset keeps the examination focused on the relevant controls and gives your team a clear understanding of the documentation and evidence that will be required.

Colleagues in conversation in a modern office

Your Team Has Other Responsibilities. We Understand.

A SOC 1 audit requires participation from your team, but it shouldn't consume their attention unnecessarily. Proper planning at the beginning of the engagement establishes responsibilities, timing and evidence requirements before fieldwork begins.

TrustBridge keeps communication direct throughout the examination, coordinates requests and addresses questions as they arise. If an issue needs attention, we identify it while there is still time to understand and address it rather than waiting until the report is nearing completion.

The result is a more predictable audit process for your team and a SOC 1 report your customers and their auditors can use.

SOC 1 Audits

SOC 1 Type 1 or Type 2?

Type 1

Type 2

Focus the Audit on What Counts.

Your Team Has Other Responsibilities. We Understand.