Demystifying Service Organization Control Reports (SOC 1 and 2, CSAE 3416) (CRS-3100)

Product code: CRS-3100

Available offerings

To register, you will be prompted to sign in.

Online

Course


Online

Course

Overview

Delivery method

Delivery method

Online

Duration

Duration

3 hours

Audience

Audience

All employees

 

Description

Course description: In today's complex business environment, entities rely on a multitude of third-party service providers. Auditors must consider the added complexity of such relationships. According to CAS 402, they need to understand the nature of the services provided and determine whether the third-party service provider is a service company.

This training activity introduces CAS 402 (Considerations for Auditing Entities Using a Service Company). This standard addresses the auditor's responsibility to obtain sufficient appropriate audit evidence when the audited entity (the user entity) uses one or more service companies. More specifically, it provides guidance on how the user entity's auditor applies CAS 315 and CAS 330 to gain an understanding of the entity.

The training activity covers the service company auditor's reports prepared in accordance with NCMC 3416 (Report on a Service Company's Controls Relevant to Internal Control over the Financial Reporting of User Entities). It also presents Type 1 and Type 2 (SOC) reports.

Target audience: AP FIN 03, AP FIN SE, DX FIN/APA, PX FIN/APA, and AAG.

Completion timelines: Must be completed before September 30th, 2026.

Externally hired employees: Must be completed within the first 3 months.

Time code: PD2499

 

Date modified: 2026-07-13

Need help?