PwC proposes SOC 2+ to dig into third-party risk
PwC has developed a framework to add to the assurance provided by an SOC 2 report (an AICPA report focused on controls around security, processing integrity, and privacy). PwC calls it an “SOC 2+” approach, building on the SOC 2 reporting principles by allowing a more independent, standardized assessment. Tammy ...
THIS IS MEMBERS-ONLY CONTENT
You are not logged in and do not have access to members-only content.
If you are already a registered user or a member, SIGN IN now.
Related articles
-
Article
Auditors plan deeper dives into outsource provider reports
As guidance changes and regulators continue to hammer on internal controls, auditors are starting to dig deeper into reports provided by outsourced service providers.
-
OpinionWhat to know about double materiality assessments for ESG initiatives
Double materiality assessments help organizations identify and prioritise ESG topics that matter most, both in terms of their impact on society and the environment, and their financial implications for the business.
-
News BriefEY compliance partner leaves after independence failings prompt regulatory investigation
Four senior partners at Big Four accountancy firm Ernst & Young, including a leader in the firm’s compliance function, have left the company because of spiralling repercussions from a costly compliance failure.