SOC Specialization
SOC 1 and SOC 2 are core areas of our practice.
A SOC firm you can confidently introduce to your clients
Your clients trust you with important technology, cybersecurity, risk, and compliance needs.
When they need an independent SOC 1 or SOC 2 examination, the firm you introduce becomes an extension of that relationship.
DES specializes in SOC reporting and works alongside MSPs, MSSPs, vCISOs, and cybersecurity professionals whose clients need independent SOC examinations.
Your client
“A customer is asking for our SOC 2.”
Your firm
The trusted technology, security or compliance advisor
MSPMSSPvCISO
DES
The client's independent SOC firm
SOC 1SOC 2
You do what you do best. We'll do what we do best.
Who we partner with
Three kinds of firms, one shared goal: a trusted SOC resource for your clients.
MSPs
You manage the technology. We handle the SOC examination.
Give clients a trusted SOC resource when compliance requirements begin affecting their technology environment and customer relationships.
Explore MSP PartnershipsMSSPs
You protect the environment. We independently examine the controls.
Pair your cybersecurity expertise with an independent firm specializing in SOC examinations.
Explore MSSP PartnershipsvCISOs & Security Advisors
You advise and help build the security program. We provide the independent SOC examination.
Help prepare and mature the client's security program while DES independently examines the applicable controls.
Explore vCISO PartnershipsExtend your capabilities without expanding your role
When SOC reporting becomes part of the conversation, DES provides the independent SOC expertise.
You remain the trusted technology, security, or compliance advisor.DES serves as the client's SOC firm.
Your team may already help clients:
- Manage technology
- Strengthen security
- Implement controls
- Address risk
- Prepare for compliance
Clear roles. Complementary expertise.
Your team
Depending on your services:
- Technology & infrastructure
- Cybersecurity
- Risk management
- Compliance preparation
- Control implementation
- Remediation
- Ongoing advisory
DES
The independent SOC examination:
- SOC engagement planning
- Scoping discussions
- Independent testing and evaluation
- SOC 1 & SOC 2 examinations
- Reporting and report issuance
- Recurring SOC engagements
One client. Two areas of expertise. Clearly defined responsibilities.
Know when to introduce DES
You don't need to answer every SOC question yourself.
Make the introduction.Our SOC team can take the examination conversation from there.
Your client
Bring us in when they say:
Bring us in when they say:
- “A customer is asking for our SOC 2.”
- “SOC 2 is required for a major contract.”
- “We're preparing for SOC 2.”
- “Should we pursue Type 1 or Type 2?”
- “We need a SOC firm to perform the examination.”
- “We're considering changing SOC auditors.”
Why DES?
Experienced Professionals
Clients work directly with professionals who understand SOC examination and reporting requirements.
Technology-Enabled Process
Technology helps us organize evidence requests, communication, and engagement progress.
Continuity
We value long-term client relationships and a more efficient recurring SOC process.
Respect for Your Relationship
We understand that your reputation is part of every professional introduction you make. Ours is too.
Give your clients a trusted SOC resource
Whether you have a client who needs SOC services today or simply want to establish the relationship for the future, we'd welcome the conversation.
No immediate client need? Let's establish the relationship now so you know who to call when SOC comes up.
