Amazing Soc 1 Bridge Letter
This is because the auditor does no additional work to attest to what is in the SOC 1 or SOC 2 bridge letter.
Soc 1 bridge letter. What Does a SOC Bridge Letter Contain. A SOC 1 f. The start and end dates of your most recent SOC report.
The bridge letter can be used by your organization as an interim assurance while waiting for the next SOC audit report. For example the January letter covers 1-Oct through 31-Dec the April letter covers 1-Jan through 31-Mar the July letter covers 1-Apr through 30-Jun and the October letter covers 1-Jul through 30-Sep. The SOC 2 Type 2 report covers of all the applicable controls for the applicable criteria that are reported by the SOC Auditor.
How long is a bridge letter good for. The bridge document that you submit to your stakeholders should contain the following components. Bridge letters are an important element of SOC 1 and 2 examinations and can help provide your clients with additional confidence Bridge letters are an important element of SOC 1 and 2 examinations that you may not be aware of and can help provide your clients with additional confidence regarding the effectiveness of your organizations controls environment at no additional cost or time.
Bridge letter or Gap letter as we call it is an essential document issued to you service organization to ensure your clients that you are compliant to SOC1 or SOC2 requirement even during the interim period between the expiry of previous years SOC report and the release of new SOC report. Also asked what is a SOC letter. What the letter allows for is the service organization to describe any excluded controls where changes have been made that are relevant to user entities internal control over financial reporting.
Herein what does a SOC 1 mean. A bridge letter also known as a gap letter is an important document made available by the service organization your vendor to cover a period of time between the reporting period end date of the current SOC report and the release of a new SOC report. How can customers benefit from Office 365 SOC 1 Type 2 attestation.
This document can be downloaded using AWS Artifact from the AWS Management Console. SOC 1 - SOC for Service Organizations. For missing periods immediately after the report some User Entities or User Auditors may insist on a SOC Bridge Letter.