SOC Cybersecurity Courses Include:

• Overview +

  This course describes the cyberthreat landscape and introduces the terminology used to describe various aspects of cybersecurity, including key definitions, key cyber threats and types of attacks, data breaches, and security and IT control frameworks.
  

• SOC Suite of Services +

  This course identifies the various SOC services, describes the evolution of the SOC suite of services, and distinguishes between SOC for Cybersecurity and SOC 2 reporting engagements.
  

   

• Cybersecurity Risk Management Program +

  This course defines, and explains the purpose, objectives and core functions of a cybersecurity risk management program. It also indicates the importance of the AICPA’s cybersecurity risk management reporting framework to a cybersecurity risk management program.

• Description Criteria +

  This course recognizes the importance of the description criteria and indicates how to use it by providing considerations in preparing and evaluating management’s description of a CRMP.

   

  
  

• Control Criteria +

  This course defines the control criteria and the relevance of the AICPA’s Trust Services Criteria. It describes the responsibilities related to the selection and use of control criteria and explains how control criteria relate to an entity’s cybersecurity objectives. It also walks through the trust services criteria, applying select criteria to a case study.

   

  
  

• Accepting & Planning SOC for Cybersecurity Examinations +

  This course recognizes the key factors to consider prior to accepting a cybersecurity examination engagement and identifies the key planning considerations, including preconditions, subject matter, independence, competency of engagement team members, and risks.
  

   

  
  

• Performing a SOC for cybersecurity examination +

  This course covers the key steps involved in executing a cybersecurity risk management examination, including responding to risks, assessing the design and operating effectiveness and controls, third party considerations, and other key considerations. It also discusses considerations related to evaluating the presentation of the description and the effectiveness of controls to meeting the cybersecurity objectives.
  

• Forming the Opinion & Preparing the Practitioner’s Report +

  This course covers the key factors to consider while forming the opinion and preparing the practitioner’s report, including results, responsibilities, and other key considerations that may affect reporting.