SOC 2 Certification – Washington DC

Washington DC business owners need to ensure sensitive data is protected, especially as it relates to financial and personally identifiable information (PII) and protected health information (PHI) (e.g., social security numbers, medical records) of customers.  Ensuring the company has robust internal controls and cybersecurity policies and practices in place to protect against a breach is essential. In fact, many may expect to see a System and Organization Controls (SOC) report before doing business with a company. This examination (often referred to as a “SOC 2 audit”) verifies that the controls, processes, and procedures have been tested and indicates whether controls are effective. 

District of Columbia SOC Expertise

Schneider Downs provides SOC examinations in DC and nationwide to dozens of companies in a variety of industries. Typically, we work with organizations that use or store sensitive financial and other data that cybercriminals may want. Some examples of the clients we serve include Software-as-a-Service (SaaS) companies, data centers, IT-managed service providers, mortgage and loan servicing companies, medical claims processors, payroll companies, and inventory management and logistics providers. Our diverse range of experience permits us to understand the company more easily, its risk profile, areas of exposure, and important testing variables.

Members of the AICPA’s 

• SOC Reporting Task Force
• SOC Peer Review Specialists 

SOC 2 Examinations – Washington DC

• SOC 2 Examinations - These examinations concentrate on the Trust Services Categories and Criteria for security, availability, processing integrity, confidentiality and/or privacy. SOC 2 requirements allow organizations to decide which categories to include in the scope of the examination. This flexibility means SOC 2 reports are unique to each company while providing a consistent framework to evaluate whether organizations meet the criteria for the categories they choose to include in the examination. Like SOC 1 examinations, there are two types of SOC 2 reports: Type I and Type II.
• SOC 2 Plus -These examinations include one to all five of the Trust Services Categories and Criteria, plus additional criteria for frameworks such as HITRUST, PCI, ISO 27001, NIST or other established control frameworks.

About Washington DC

Washington D.C. is known for its iconic monuments and landmarks, such as the White House, the Lincoln Memorial, the Washington Monument, and the United States Capitol Building. It is also home to several world-renowned museums, including the Smithsonian Institution, which comprises 19 museums and galleries, as well as the National Gallery of Art.

In addition to its historical and cultural offerings, Washington D.C. is a hub for politics, with the federal government and its agencies located throughout the city. The city is home to the three branches of the federal government, including the White House, the Supreme Court, and the U.S. Capitol Building. The city is also home to several international organizations, including the World Bank and the International Monetary Fund.

Contact Our Washington DC SOC 2 Examination Team

Schneider Downs provides SOC 2 examinations and readiness assessments to companies in Washington DC. If you are interested in learning how we can assist your organization, complete the form to the right and a team member will follow up with you promptly.

Does your organization need a system and organization controls (SOC) report?

take a free assessment quiz