X

Thank you for sharing!

Your article was successfully shared with the contacts you provided.
Cybersecurity

Before your team gives a software vendor access to its repository of legal agreements and sensitive business information, that vendor needs to show you their SOC 2 Type II attestation and audit report. And if the vendor doesn’t have a SOC 2 Type II report—or, worse, doesn’t know what SOC 2 is—that’s a huge red flag. Here’s why.

The “SOC” in SOC 2 stands for service organization controls. A service organization is any service provider, from your ISP to the local power company to your cleaning service. Controls are processes and documentation that make sure a company is currently well run, has been run well in the past, and thus is likely to be well run in the future.

SOC 2 is a compliance standard set up by the American Institute of Certified Public Accountants (AICPA) to make sure businesses don’t take on undue risk when they hire a service provider. More simply, SOC 2 is proof that the vendor you’re hiring will be able to offer a reliable service and, more importantly, won’t be careless with the information you share with them.

Want to continue reading?
Become a Free ALM Digital Reader.

Benefits of a Digital Membership:

  • Free access to 1 article* every 30 days
  • Access to the entire ALM network of websites
  • Unlimited access to the ALM suite of newsletters
  • Build custom alerts on any search topic of your choosing
  • Search by a wide range of topics

*May exclude premium content
Already have an account?

 
Reprints & Licensing
Mentioned in a Law.com story?

License our industry-leading legal content to extend your thought leadership and build your brand.

Private Equity Funds: Business Structure and OperationsBook

Outstanding practical guide that gives attorneys, investment professionals, tax practitioners and corporate lawyers the tools they need to handle any aspect of a privat...

Get More Information
 
 

ALM Legal Publication Newsletters

Sign Up Today and Never Miss Another Story.

As part of your digital membership, you can sign up for an unlimited number of a wide range of complimentary newsletters. Visit your My Account page to make your selections. Get the timely legal news and critical analysis you cannot afford to miss. Tailored just for you. In your inbox. Every day.

Copyright © 2021 ALM Media Properties, LLC. All Rights Reserved.