PwC proposes SOC 2+ to dig into third-party risk
PwC has developed a framework to add to the assurance provided by an SOC 2 report (an AICPA report focused on controls around security, processing integrity, and privacy). PwC calls it an “SOC 2+” approach, building on the SOC 2 reporting principles by allowing a more independent, standardized assessment. Tammy ...
Related articles
-
Article
Auditors plan deeper dives into outsource provider reports
As guidance changes and regulators continue to hammer on internal controls, auditors are starting to dig deeper into reports provided by outsourced service providers.
-
WebcastDec 16 | Hot Topics in Risk and Compliance: AI, Analytics, and Emerging Audit Technologies
Join experts from KPMG, Cisco, and Workiva as they explore how audit, accounting, and finance professionals can leverage a technology mix of data analytics, gen AI, and other tools to ramp up efficiency and strengthen control effectiveness.
-
ArticleFRC’s plans for more flexible enforcement gains support
Plans to give the U.K.’s audit regulator more options to regulate firms for sloppy work have been largely well received by experts, who believe the current system is “inflexible,” “cumbersome,” and “slow.”