Why Do SOC Reports Have to Be Issued By a CPA Firm?

Originally published by MJD.Written by Chris Giles, CPA, Senior Manager, MJD.Q: Why do SOC reports have to be issued by a CPA firm?A: MJD AnswerThe simple answer is that SOC engagements are performed in accordance with standards set by the American Institute of Professional Accountants (AICPA). The attestation standards (SSAE 21) and the SOC 2 trust services criteria were created and codified by the AICPA and state that only a licensed CPA firm is able to perform the service. The …

american attestation chris manager professional reports simple soc standards written