Using AICPA applicable guildines as requirement, along with our own methodology of COSO implementation, and risk assessment, we advised Workspend to achieve SOC 1 attestation.
Driven by customer and system objectives, we designed the applicable controls through a process of gap analysis, documentation, distribution of controls, policies and procedures.
Our methodology helped them achieve an ongoing risk and compliance framework where management can view the transparent nature of control performance.
To know more about Workspend - https://workspend.com/
To know more about Coral SOC 1 consulting strategy - https://www.coralesecure.com/SOC1-SSAE18-ISAE3402-Implementation-Attestation.php