GLOSSARY
SOC 2 auditor
Terms
What is a SOC 2 auditor?
‍
To obtain a SOC 2 audit and report, an organization’s security measures must be reviewed and verified by a certified auditor. Only licensed CPA firms can perform a SOC 2 examination.
‍
SOC auditors are independent CPAs who work with the SOC (System and Organization Controls) suite to evaluate and report on the controls in place at a service organization, relevant to a set of criteria known as the Trust Services Criteria: Security, Availability, Processing Integrity, Confidentiality, or Privacy. A SOC 2 auditor’s independent verification of an organization’s security systems is intended to help service organizations provide their customers and prospects with valuable information about how they manage data and information security.
‍
Working with a CPA and certified SOC 2 auditor is a key part of obtaining a SOC 2 report.
Vanta is the easy way to get SOC 2, HIPAA, or ISO 27001 compliant. Over 2,000 fast-growing companies trust Vanta to automate their security monitoring and get ready for security audits in weeks instead of months. Simply connect your tools to Vanta, fix the gaps on your dashboard, and then work with a Vanta-trained auditor to complete your audit. We'll guide you throughout the process and help tailor your security monitoring and compliance to meet the needs of you and your customers. Vanta was founded in 2016 and headquartered in San Francisco.
