PwC proposes SOC 2+ to dig into third-party risk
PwC has developed a framework to add to the assurance provided by an SOC 2 report (an AICPA report focused on controls around security, processing integrity, and privacy). PwC calls it an “SOC 2+” approach, building on the SOC 2 reporting principles by allowing a more independent, standardized assessment. Tammy ...
Related articles
-
Article
Auditors plan deeper dives into outsource provider reports
As guidance changes and regulators continue to hammer on internal controls, auditors are starting to dig deeper into reports provided by outsourced service providers.
-
OpinionThe Compliance - Audit gap in ESG and financial reporting
ESG reporting has moved from a voluntary PR exercise to an expectation for regulators and investors, but the compliance audit gap now threatens credibility.
-
PremiumU.K. financial regulator looks to streamline audit enforcement procedures
Auditors are supposed to keep businesses honest, but how much regulation is the optimum for the auditors – and how onerous and punitive should the enforcement regime be? A new consultation by the U.K. regulator, the Financial Reporting Council, opened on Oct. 1 and has put the vexed question of ...