SOC specialization
Clients work with professionals experienced in SOC examinations.
You build the security program. We provide the independent SOC examination.
You help clients assess risk, establish controls, address deficiencies, and mature their security and compliance programs.
When preparation gives way to independent SOC examination, DES provides the specialized SOC expertise.
Your client
“A customer is requiring SOC 2. What's next?”
You
Build the security program
AdvisePrepare
DES
Provides the independent SOC examination
SOC 1SOC 2
From advisory to independent examination
The next step is different.
By the time a client is ready to pursue SOC reporting, you may have already helped management:
- Assess security risks
- Establish policies and procedures
- Strengthen controls
- Identify and address gaps
- Prepare for customer security reviews
- Develop an ongoing compliance program
One client. Two distinct professional roles.
vCISO / Security Advisor: Advise & Prepare
- 1Security strategy
- 2Risk management
- 3Program development
- 4Controls
- 5Remediation
- 6Ongoing advisory
DES: Independently Examine
- 1SOC planning
- 2Scope
- 3Testing
- 4Evaluation
- 5Reporting
- Report issuance
A SOC relationship you can use again
Your team shouldn't have to search for a new SOC firm every time a client reaches the SOC examination stage.
A relationship with DES gives you a consistent resource for clients who need SOC reporting.
Respect for your advisory relationship
You remain the security advisor. DES serves as the SOC firm.
Clear professional responsibilities
Advisory and independent examination remain distinct roles.
Direct communication
Clients can address examination scope, timing, evidence, and reporting directly with our SOC professionals.
When should you bring DES in?
You don't need to wait until every control is perfect.
Make the introduction when a client begins asking:
DES can address the examination-related considerations while you continue advising the client.
Your client
- “A customer is requiring SOC 2. What's next?”
- “Should we pursue Type 1 or Type 2?”
- “What belongs in scope?”
- “When should we engage the SOC firm?”
- “Are we ready for the examination?”
Give your clients a trusted SOC resource
Whether you have a client who needs SOC services today or simply want to establish the relationship for the future, we'd welcome the conversation.
No immediate client need? Let's establish the relationship now so you know who to call when SOC comes up.
