SERVICES

AuditOne LLP Service Offerings

AuditOne LLP offers the following services:

• AICPA SOC 1, SOC 2, SOC 3 Attestation Reports
• ISO/IEC 27001:2022 Stage 1, Stage 2, and Surveillance Reviews

AICPA Attestation Reports (SOC 1, SOC 2, SOC 3)

AICPA attestation reports include several types of SOC examinations designed to evaluate different aspects of organizational controls. SOC 1 focuses on internal controls over financial reporting (ICFR) and comes in two forms: Type I, which assesses the design of controls at a specific point in time, and Type II, which evaluates both the design and operational effectiveness of those controls over a defined period. SOC 2 addresses controls related to the Trust Services Criteria—security, availability, processing integrity, confidentiality, and privacy. Like SOC 1, it offers Type I reports for control design and Type II reports for ongoing operational effectiveness. SOC 3 is a public-facing version of a SOC 2 audit, often accompanied by a trust seal for marketing and assurance purposes. Together, these reports serve financial, security, and public trust needs, ensuring alignment with stakeholder expectations and regulatory requirements.

ISO/IEC 27001:2022 Reviews (Stage 1, Stage 2, Surveillance, Recertification)

The audit process for ISMS certification begins with Stage 1: the Readiness Assessment, which involves a thorough review of ISMS documentation, a gap analysis to identify areas needing improvement, and recommendations to enhance compliance. Next, Stage 2: the Certification Audit provides a comprehensive evaluation of ISMS implementation, including control testing and compliance verification, followed by a certification decision and guidance on any corrective actions required. After certification, Surveillance Reviews are conducted annually to monitor ongoing ISMS compliance and effectiveness, assess updates, risk management practices, and continual improvement efforts, and provide feedback to maintain certification status. Finally, every three years, a Recertification Audit is performed to fully reassess the ISMS and renew certification. ISO/IEC 27001:2022 reviews are only for existing SOC audit clients.