Back to Service Library
Service Catalog / Strategic Advisory & Professional Services / Compliance Readiness / SOC2 – 1 External Audit Guide
157SEAG Base

SOC2 – 1 External Audit Guide

On this page

    Service Overview

    An Audit Guide is a DeepSeas consultant, who participates in audits to help the Client defend against findings where issues are called into question by the auditor.

    This Statement of Work identifies the objectives, scope, methodology, deliverables, client requirements, and assumptions for all work to be completed by DeepSeas.

    Objectives

    The objectives of this initiative are as follows:

    1. Coach/consult in the preparation of documents and evidence for scheduled audits
    2. Assist ISMS Manager by advising on the relevant document for examination or helping explain organizational opinion for conformance to the intent of the specific control under discussion
    3. Consulting on corrective actions required for non-conformities from the audit

    Methodology

    TThe methodology consists of the following activities:

    1. EXTERNAL AUDIT GUIDE
      1. PRE-AUDIT €“ Preparation necessary to prepare for audit(s) including the following:
        1. Guidance on audit best practices.
        2. Advisory to Client to allow the Client to upload correct evidence to the External Auditor.
      2. AUDIT GUIDE €“ DeepSeas ISO Specialist will attend audit interview sessions and assist if:
        1. The Client needs guidance in support of the ISMS program.
        2. Substantiate any questionable findings that the auditor may have.
      3. POST-AUDIT €“ Assist the Client in the following post-audit activities:
        1. Consulting on opportunities for improvement, if needed.
        2. The Client files Corrective Actions with root cause analysis in the allowable timeframe.
        3. Consulting on corrective actions of non-conformities, if needed.

    Deliverables

    There are no deliverables for this initiative.

    Client Responsibilities

    The client is responsible for the completion of the following tasks, in accordance with agreed-upon timelines established as part of the project plan.

    1. The Client Program Sponsor is to assign a point of contact (POC) responsible for client coordination and logistics.
    2. The client is responsible for scheduling and coordination of internal client resources for all program work.