Service Organization Control Reports

These days, most organizations outsource some function of their infrastructure to a third-party business. Imagine you are the owner of a company. Deciding to put your company’s sensitive data in someone else’s hands is a difficult decision to make. You’ll likely want to ensure that certain controls are in place before you take on such a risk. The functions provided by the third-party businesses are going to affect the user organization’s records. This could be your customer’s health or financial information, for example.

As a result, service organizations find it important to instill trust and confidence in their customers. The service organization has a vested interest in helping its customers understand ...

Get Auditing IT Infrastructures for Compliance, 3rd Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.