System and Organization Controls (SOC) 2 is a security standard developed by the American Institute of Certified Public Accountants (“AICPA”) that details the ways in which organizations should manage their internal control environment. The SOC 2 examination is a report on controls at a service organization like Blackpoint Cyber, relevant to security, availability, processing integrity, confidentiality, or privacy of the information it processes to provide products and services to customers. Together these are referred to as the “trust services criteria.” SOC2 reports are intended to meet the needs of a broad range of users that need detailed information and assurance about the controls at a service organization like Blackpoint Cyber.
For the past two years, Blackpoint has undergone rigorous audits and assessments voluntarily to ensure that our internal control environment meets the AICPA’s Trust Services Criteria, including security, availability, and confidentiality.
SOC 2 compliance comes in two forms: A SOC 2 Type I report provides a “point in time” analysis of the control environment, whereas a SOC 2 Type II report details the operational effectiveness of the control environment over a specified period of time – in our case, an entire year.
