What to Do When You’re Unable to Get SOC Information 213: Tips and Tricks

Introduction

SOC 2 Type 2 audits are essential for companies to ensure that they are following the necessary security procedures to protect their customer’s data. SOC 2 compliance is a rigorous process, requiring companies to document their security policies and procedures in detail. However, what do you do when you are unable to get SOC information 213? In this article, we will explore some essential tips and tricks to help you succeed in getting SOC information 213.

What is SOC Information 213?

SOC Information 213 is a report prepared by the auditors during the SOC 2 Type 2 audit. This report contains the controls tested during the audit and the results of those tests.

Reasons Why You May Be Unable to Get SOC Information 213

There can be numerous reasons why you may be unable to get SOC information 213 from your auditors. Some of the common reasons are:

• The audit is ongoing, and the auditors have not yet completed all the testing.
• The audit report is not yet available as the report has not been finalised and signed off by the auditors.
• The auditors cannot give out the report because it contains sensitive information.
• The company did not provide complete and accurate information to the auditors.

Tips and Tricks to Get SOC Information 213

Communication with Auditors

The first step to getting SOC information 213 is to communicate with your auditors. Ensure that you have a good relationship with them, as it will go a long way in getting the information you need. Send them emails or call them to follow up and get the latest updates on the audit process.

Be Clear on the Information You Need

Before contacting the auditors, identify the specific SOC information 213 you need. Be clear on the controls that were tested, any issues identified, and the remedial action taken. This will make it easier for the auditors to provide you with the information you need.

Ask for a Summary of the Report

If the audit report is not yet available, ask the auditors for a summary of the key findings. This may give you an indication of the areas where you need to improve.

Check Your Contract with Your Auditor

Check your contract with your auditor to ensure that they are contractually obliged to provide you with SOC information 213. If they are, quote those provisions to the auditors and demand that they provide you with the report.

Audit Documentation Request

Submit an Audit Documentation Request (ADR) to the auditors. This is a formal request for documents and information, and the auditors are required to respond within a stipulated time.

Conclusion

Getting SOC Information 213 can be a daunting task, but it’s not impossible. Communication with your auditors, being clear on the information you need, and checking your contract can all help in getting the information you require. Remember that SOC compliance is an ongoing process, and it’s essential to have open and transparent communication with your auditors to get the most value out of the audit process.