SOC® ASSESSMENTS & EXAMINATIONS
soc 2 reports in detail
SOC 2 Services
The SOC 2 Report (System and Organization Controls 2 Report) focuses on non-financial controls relevant to the AICPA Categories: Security, Availability, Processing Integrity, Confidentiality & Privacy.
For organizations such as Enterprise IT Outsourcing Services, Managed Security, Customer Support, Healthcare Claims Management & Processing, and FinTech Services
SOC 2 Readiness Assessment
This overview is designed to help the service organization prepare for the SOC 2 examination by identifying deficiencies, gaps, and other potential red flags, along with coaching so management can understand their options to repair them.
SOC 2 Type 1 Examination & Report
(Point-in-Time Assessment)
A SOC 2 Type 1 report evaluates your organization’s system and the design of its security controls at a specific point in time. It confirms that the right controls are in place to meet industry standards and client expectations.
What It Covers: A description of your system and services
- The design of internal controls for security, availability, confidentiality, and privacy
- Alignment with AICPA’s Trust Services Criteria
Ideal for: Early-stage companies or those seeking a quick assurance snapshot.
Audit Timing: SOC 2 Type 1 assessments reflect a snapshot in time, rather than testing controls over a longer period.
SOC 2 TYPE 2 Examination & Report
(Annual Audit)
A SOC 2 Type 2 report provides a detailed, third-party assessment of your organization’s controls over a 12-month period. It not only reviews the design of your security controls but also tests how well they operated in practice.
What It Covers:
- Security, availability, confidentiality, and privacy controls
- Testing results and audit findings
- Compliance mappings to ISO standards, HIPAA, and FFIEC
Ideal for: Companies needing proof of long-term security practices.
Audit Frequency: SOC 2 Type 2 audits are conducted annually.
SOC 2+ Examination & Report
(Hybrid Compliance Assessment)
The SOC 2+ report builds on a standard SOC 2 by integrating additional compliance frameworks (like HIPAA or HITRUST) into a single audit. It’s ideal for organizations needing to meet multiple regulatory or security standards with one comprehensive report.
What It Covers:
- SOC 2 Trust Services Criteria plus added controls from frameworks like HITRUST, HIPAA, and CSA STAR
- A third-party opinion on the design and effectiveness of combined controls
- Custom compliance mapping based on your needs
Ideal for: Organizations with complex regulatory needs.
Audit Frequency: SOC 2+ audits are performed annually.
You Don’t Have to Take Our Word for it
“Being able to leverage the compliance reports we’ve done with 360 Advanced enables a faster speed of delivery in our deal cycles, which we’ve seen with both new sales and renewals.”
Erin Elliott Director of Information Security | Parchment
“When you work with 360 Advanced, you’re getting more than a service; you’re truly getting a partner. You work with the same people over time and they really get to know your environment. That continuity makes it easier to go into new assessment cycles, because they’re already familiar with you and can jump right in.”
Nick Lees Director of Information Security & Compliance | Luma Health
Audit-Ready and Acquisition-Ready: How Parchment Used Compliance to Accelerate Growth
Parchment (acquired by Instructure in 2024) is one of the world’s largest academic credential management platform and network, helping learners, academic institutions, and employers request, verify, and receive transcripts, diplomas, and other credentials.
Learn more about SOC Examinations with our free guide
System and Organization Controls (SOC) reports allow service providers to demonstrate that they are operating in an ethical and compliant manner. The guide discusses the difference between each report, and when to use them.
Delve into the world of cybersecurity and compliance services we provide.