Soc-1

System and Organization Controls (SOC) Reports are independent third-party examination reports that demonstrate how service providers achieve key compliance controls and objectives. The purpose of these reports is to help user entities and their auditors understand the service provider controls established to support operations and compliance pertaining to internal controls over financial reporting. SOC Reports are prepared in accordance with the American Institute of Certified Public Accountants (AICPA), Statement on Standards for Attestation Engagements (SSAE) 18, AT-C 320 (SOC 1) and can also comply with the International Standards for Assurance Engagements (ISAE) No. 3402, Assurance Reports on Controls at a Service Organization.

 

Additional information can be found on the AICPA and International Auditing and Assurance Standards Board (IAASB) websites:

 

• AICPA – https://www.aicpa.org/interestareas/frc/assuranceadvisoryservices/aicpasoc1report.html
• IAASB – http://www.ifac.org/publications-resources/international-standard-assurance-engagements-isae-3000-revised-assurance-enga

 

As a business to business service provider, CSG provides services critical to our customers’ business operations, revenue and payments management, and customer communications. The purpose of the SOC 1 Report is to provide information to customers and their auditors with information regarding CSG’s control environment that may be relevant to their internal controls over financial reporting and assist in their assessment and opinion of the effectiveness of their controls.

 

CSG’s SSAE 18 / ISAE 3402 SOC 1 Type II Report, which is prepared in accordance with both the AICPA AT-C 320 and IAASB ISAE 3402 standards, provides a description of the CSG control environment and the results of the external audit of the CSG-defined controls and objectives. The Report is published annually in December covering the twelve-month period October 1 through September 30.

 

The annual SOC 1 report is available to CSG’s customers, and their auditors, who are users of the products and services included within the report. Instructions for downloading the report can be found here.

 

• The scope of CSG’s 2023 SOC 1 Type II and 2023 Managed Services SOC 1 Type II reports is included here.
• The control objectives within CSG’s 2023 SOC 1 Type II and 2023 Managed Services SOC 1 Type II reports are included here.

 

For questions or to request more information, you can contact us here.