Enterprise customers increasingly ask vendors for a SOC report. Our readiness work maps your controls to the AICPA Trust Services Criteria and closes the gaps before an examination.
Which report?
Each answers a different question from your customers.
Controls relevant to your customers’ financial reporting — e.g. payroll or billing providers.
Controls over security, availability, processing integrity, confidentiality and privacy.
A general-use summary of SOC 2 that can be shared publicly.
Readiness is consulting and provides no assurance. SOC reports are issued only under a separate examination.
Trust Services Criteria
Most first SOC 2 reports start with Security and add criteria as customers ask.
Required in every SOC 2.
Systems available as committed.
Processing complete and accurate.
Confidential information protected.
Personal information handled properly.
Type 1 vs Type 2
Many organizations start with Type 1, then move to Type 2.
Assesses whether controls are suitably designed as of a single date.
Also tests whether controls operated effectively over a review period, typically several months.
If NexusWorks performs your readiness work, independence rules may prevent us from also issuing your SOC examination report. We’ll tell you up front and can coordinate with an independent examiner.
How an engagement works
Systems, services and criteria in scope.
Controls mapped against the criteria.
A prioritized plan to close gaps.
Prepared for the examination.
FAQ
Reviewed by the NexusWorks assurance team · Last updated Oct 28, 2026
Our current service is readiness. SOC reports are issued only under a separate examination.
Many organizations start with Type 1 to confirm design, then move to Type 2.
SOC 2 is an AICPA attestation report on controls; ISO 27001 is a certification of an information security management system. Customers may ask for either.
Security is required in every SOC 2. Availability, processing integrity, confidentiality and privacy are optional.
Related insights
Tax Planning Strategies
Compare CPA compilation, review, and audit engagements under SSARS and auditing standards to find the right assurance level…
READ MORE ●Business
A CPA guide to personal financial statement preparation and net worth documentation, covering assets, liabilities, valuation, and CPA…
READ MORE ●Assurance
Match your request
Paste the exact wording from your lender, surety or agency. We'll tell you which engagement satisfies it — and if it doesn't fit what we offer, we'll say so.
Out-of-state engagements accepted where state rules permit.
Hi there! Have a question about tax, bookkeeping or CFO support? Send us a message on WhatsApp.
Start chat
