SOC 1,2 & 3

At FD, we offer a full suite of SOC services to meet the needs of organizations of all sizes and industries. Trust our nationally recognized, highly credentialed advisors to guide you through every step.

Talk to a specialist

Our Approach

Show Your Clients You’re a Partner They Can Trust

System and Organization Controls (SOC) reports showcase that your risk management processes have been rigorously evaluated by a certified public accounting firm. Our FD advisors leverage SOC examinations to enhance your organization’s credibility with partners and customers, while providing valuable insights to refine and strengthen your risk management practices.

Attest services are provided through Frazier & Deeter, LLC, a licensed U.S. public accounting firm.

Talk to a specialist

SOC Readiness Services

Our advisory team works with management to determine your SOC reporting needs and the scope of services to be reported.

We can help you:

Identify and document key control objectives or trust principles
Evaluate the effectiveness of your current controls
Identify potential gaps in your control design
Improve your overall risk management position

Our Services

Find the Right Service for Your Needs

There are several examinations within our SOC suite of services. We can guide you through the options to find the right fit for your organization.

SOC 1

SOC 1 reports assess an organization’s internal controls that impact customers’ financial reporting. Intended for customers and their auditors, these reports help evaluate how your controls affect their financials, often used by service providers like payroll or AP/AR firms.

SOC 2

SOC 2 reports assess internal controls for Security, Availability, Processing Integrity, Confidentiality and/or Privacy. These reports provide broad users with detailed assurance on the strength of controls over system security, data processing and information confidentiality.

SOC 3

SOC 3 reports cover the same areas as SOC 2 (Security, Availability, Processing Integrity, Confidentiality and/or Privacy) but are for general use. They are intended to meet the needs of users who need assurance on internal controls and may be published on an organization’s website.

SOC for Cybersecurity

SOC for Cybersecurity reports examine an organization’s cybersecurity risk management program and controls. These reports are intended to provide users with information to help them understand your process for handling enterprise-wide cyber risks.

Talk to a specialist

Featured Insights & Resources