IMCORP SOC 2 audit

Each year, millions of people and thousands of businesses are impacted by underground cable system failures. IMCORP is dedicated to advancing the understanding of how these failures occur and more importantly, how they can be avoided.
Wednesday, June 15, 2022

IMCORP reinforces its commitment to its customer's confidence by safeguarding their data with a SOC 2® Type 2 2022 attestation!

IMCORP continues to fortify its commitment in providing quality service to its customers by furthering their Service Organization Controls (SOC 2®) compliance program.

In February of 2022 IMCORP partnered once again with A-LIGN (a-lign.com), an industry leading Cybersecurity-focused CPA firm, for its annual SOC 2® Type 2 audit.

The scope (IMCORP’s Power Cable Reliability Services System) of the examination, performed by A-LIGN ASSURANCE, was conducted in accordance with the attestation standards established by the AICPA.   The purpose was to determine that the Company’s environment related to the 2017 Trust Services Criteria regarding Common Criteria/Security, Availability, Processing Integrity, and Confidentiality meets the criteria in all material respects.

To ensure that we continually maintain a high-quality security regimen for our customer data and company networks IMCORP (SOC 2® Type 2) will continue to have these audits conducted on an annual basis.

What is a SOC 2®?

A SOC 2® audit, or Service Organization Control 2, is an audit of a service organization's non-financial reporting controls as they relate to the Trust Services Criteria – security, availability, processing integrity and confidentiality.

What is required for a SOC 2® attestation?

The audit is considered technical, but it goes beyond that: American Institute of CPAs (AICPA)'s Service Organization Control reporting platform SOC 2®requires companies to establish and follow strict information security policies and procedures, encompassing the above-mentioned Trust Services Criteria.

SOC 2® Type 2 Definition

The SOC 2® is designed for service providers storing customer data in the cloud. It requires companies to establish and follow strict information security policies and procedures encompassing the Trust Services Criteria.

What does a SOC 2® report cover?

A SOC 2® Type 2 report is an internal controls report capturing how a company safeguards customer data and how well those controls are operating. These reports are issued by independent third-party auditors (in this case our partner A-LIGN) and cover the company’s policies, processes and practices involved in the Trust Services Criteria of customer data.

 


View Article List