Webinar

Keys of SOC Reports: Following SSAE 18 Requirements

---

Today's businesses have seen a dramatic increase in the use of outsourced providers to assist with executing processes from payroll, accounts payable, information technology, benefit plan administration and many other core processes. These processes ultimately have an impact on an organization's internal control over financial reporting but also could impact compliance and operational issuesIn 2011, the Statement on Standards for Attestation Engagements (SSAE) 16 replaced the former Statement on Auditing Standards (SAS) 70. In May 2017, a new standard, SSAE 18, superseded SSAE 16. The concepts covered in this course are referred to as a Service Organization Control Report (SOC). Organizations who utilize outsourced providers should understand the various types of SOC reports, their intended use and their implication on a company's financial reporting process, regardless of your status as a publicly traded or privately held organization. The process can be complicated to understand as a user organization. Currently, several types of SOC Reports exist including: SOC 1 - Type 1; SOC 1 - Type 2; SOC 2 - Type 1; SOC 2 - Type 2; SOC 3; Cybersecurity SOC. This course speaks briefly to the transition from SAS 70 to SSAE 16 and now SSAE 18. However, the focus is on the various Service Organization Control Reports, their purposes and uses

Major subjects

• Move from SAS 70 and SSAE 16 to SSAE 18.
• Types of Service Organizations.
• SOC 1 Engagements.
• Control Objectives.
• Reporting.
• SOC 1 and SOC 2 Reporting.
• SOC 3 Reports.
• Preparing for SOC Engagement.
• SOC Comparisons.

Learning objectives

• Explore the transition of the accounting standards from Statement on Auditing Standards (SAS) 70 to Statement on Standards for Attestation Engagements (SSAE) 16 and now SSAE 18.
• Recognize the various types of service and subservice organizations.
• Explore procedures to conduct a SOC (Service Organization Control) 1 engagement, develop proper control objectives and determine specific reporting methods.
• Explore procedures to conduct and report on a SOC 2 engagement.
• Recognize the requirements for SOC 3 reports.
• Explore the SOC cybersecurity requirements.
• Recognize the requirements to prepare for a SOC engagement.
• Recognize the requirements for user entities.

Who should take this program?

• CPAs, Corporate personnel working with SOC providers, consultants providing SOC reports.

Pricing

Our records indicate you are a nonmember. If you register, you will be charged $85.00 (Standard Nonmember Fee). Members: Please log in to receive member fee.

---

Related programs

July 17, 2026 | Surgent's Advanced Audits of 401(k) Plans: Best Practices and Current Developments | Webinar

July 17, 2026 | How SAS Nos. 134-145 Improve Risk-Based Audits | Webinar

July 17, 2026 | Accounting and Attestation for ESG | Webinar

July 17, 2026 | How to Audit Cash | Webinar

July 17, 2026 | Independence for Auditors: AICPA, PCAOB, GAO and DOL | Webinar

---

Related products

The Future of Audit: Technology, Talent and Transformation | Self-Study (On-Demand)

What's Behind the Data? | Self-Study (On-Demand)

Surgent's A Guide to Auditing Common Investments | Self-Study (On-Demand)

Surgent's A Practical Guide to Auditing Cash and Cash Equivalents | Self-Study (On-Demand)

Surgent's Accounting and Auditing Credit Losses Under ASC 326 | Self-Study (On-Demand)

---