List of Courses
-
System & Organization Controls (SOC) Part I - CO005011
-
System & Organization Controls (SOC) Part II - CO005012
-
System & Organization Controls (SOC) Part III - CO005013
-
System & Organization Controls (SOC) Part IV - CO005014
Objective
1. Awareness – Refer to Awareness Bundle 1
2. Part II explains the SOC2 audit requirements, who can perform the audit, and applies relevant SSAE 18 standards.
3. You will learn about SOC 1, SOC 2, SOC 3, SOC 2 +, SOC for Cyber Security, SOC for Supply Chain, and SOC 2 + Additional Subject Matter Reports, as well as the scope and use of these reports. The study contains case studies for SOC for Cyber Security and SOC for the supply chain. You will learn about mapping Trust Service Criteria to other standards and frameworks.
4. Part III provides in-depth knowledge of Trust Service, Common Criteria, and Supplemental criteria. You will learn to select the Trust Service Criteria for your organization, understand the underlying expectations under each Trust Service Criteria, the importance of Security criteria, and why it is mandatory.
5. Part IV provides practical implementation knowledge of Common Criteria and Supplemental Criteria. You will learn about Generally Accepted Privacy Principles (GAPP), what’s included in the SOC report, what’s included in Management Assertions, and the Description of the System. You will also learn about the latest AICPA guidelines - Description Criteria 200 (DC 200).