This site uses cookies to store information on your computer. Some are essential to make our site work; others help us improve the user experience. By using the site, you consent to the placement of these cookies. Read our privacy policy to learn more.

IT risk & assurance services

About this topic

These learning resources are designed to help you - whether working in a business or firm - establish and maintain proficiency in the areas of information and data management and analysis; IT risk and assurance services, including service organization controls (SOC) reporting; and information security and privacy, including the growing issue of cybersecurity.

Technology risk: It’s more than cybersecurity

This column discusses the “silent killers” of technology risk that organizations must master to protect their business.

Article IT risk & assurance services Intermediate

SOC 2 Update

This archived webcast summarizes updates in the AICPA’s new guide: Reporting on Controls at a Service Organization Relevant to Security, Availability, Processing...

Webcast Service organizations Foundational

Data analytics helps auditors gain deep insight

Technology provides opportunity to test full data sets rather than just samples.

Article Data analytics Foundational

How to use COSO to assess IT controls

This article shows the steps organizations can follow to understand their organization’s IT system and its controls, and assess the effectiveness of those controls.

Article IT controls Intermediate

Embracing the automated audit

Technology is changing the way audits are being performed, with greater access to data but also more data to sort through. Auditors can remain efficient and effective...

Article Data analytics Foundational

From insight to impact - unlocking opportunities in big data: Full report

‘From insight to impact - unlocking opportunities in big data' investigates how leading finance professionals are using data to drive commercial impact.

Report Data strategy and planning Advanced

Improving decision making in organisations: Unlocking business intelligence

This report provides tools to improve accounting operations and acquire a greater competence in informed decision making.

Report Financial analysis Advanced

Audit and Attest Standards

This page provides access to all current AICPA audit and attest standards and interpretations.

Publication Authoritative guidance Foundational

SOC 1 ® Report on Controls at a Service Organization Relevant to User Entities’ Internal Control over Financial Reporting

This page provides a summary of the purpose and types of SOC 1 reports.

Article Service organizations Foundational

SOC 2 ® Report on Controls at a Service Organization Relevant to Security, Availability, Processing Integrity, Confidentiality or Privacy

This page summarizes the purpose (including importance to stakeholders) and types of SOC 2 reports.

Article Service organizations Foundational

SOC 3® Trust Services Report for Service Organizations

This page provides an introduction to SOC 3® reports.

Article Service organizations Foundational

SOC Toolkit for Service Organizations

​This toolkit is intended to help service organizations better understand SOC services.

Article Service organizations Foundational