Service organization controls: update on SOC 1, understanding SOC 2 and SOC 3

SAS 70 has been the standard form of reporting on the effectiveness of service organizations and internal controls over financial reporting since 1992. Globalization and regulatory changes prompted the AICPA to issue SOC 1 (SSAE 16) guidance that is now superseding SAS 70, and in mid-2011, the AICPA will issue SOC 2 (Reporting on Controls at Service Organization Related to Security, Availability, Processing Integrity, Confidentiality and Privacy) and SOC 3.

Join us on Thursday April 14th as Ernst & Young LLP professionals discuss the implementation of SOC 1 as well as the new SOC 2 and SOC 3 reporting options and the effect on your organization.

Our panelists will share:

• An update on how leading organizations are implementing SOC 1
• An understanding of the SOC 1/2/3 framework
• The benefits of SOC 2
• Applying SOC 2 and SOC 3 to business situations
• A case study in applying SOC 2