UOP CMGT245 Week 2 Discussion

CMGT245 IS Security Concepts

Week 2 Discussion

DQ1 SSAE 16 and SOC Audit Reporting

Consider how a provider of technology services might use standards, such as those discussed in "SSAE No. 16" and "Service Organizations Control (SOC) Reports," to market its products, as well as manage the relationship and limit risk for the buyer of those services.

Read "SSAE 16 Overview" from the SSAE 16 website.

Read "Service Organization Control (SOC) Reports" from the SSAE 16 website.

Discuss the "Service Organization Control (SOC) Reports" and what they provide the buyer. Review the SOC Type 1 and Type 2 Audit Reports. Discuss their importance to the buyer of services.

 DQ2 Risk Management Process

Research different approaches to the risk management process.

Provide an example where you used a risk management process, either professionally or personally. Describe the outcome or result