This is crazy, but unfortunately not surprising. We’ve seen a lot of terrible SOC 2 reports. One of the worst was from a national pharmaceutical company that said they got their prior year report in less than two weeks. Just this week, another company told us a firm promised to deliver their SOC 2 Type 2 report in less than a week. We spend hundreds of hours on each SOC 2 engagement, even with automation, because doing it right takes time. However we lose out on a lot of business to these "report mills" that rubber stamp reports and cut corners. It’s frustrating, and it’s also damaging. It dilutes the credibility of SOC 2 reports to the point where it’s not surprising people are starting to say SOC 2 is useless. The AICPA and other governing bodies are not doing enough to weed out bad actors.
We are proud to announce that Audit Peak has successfully completed its AICPA Peer Review with a ‘Pass’ rating - the highest possible outcome.
Official Press Release -
https://t.co/NtA9PXsqDx