Under the Cyber Verify program, managed service providers (MSPs) and cloud providers have the opportunity to go through a SOC 2 audit. The SOC 2 (Service Organization Control 2) framework, developed by the American Institute of Certified Public Accountants (AICPA), focuses on critical information technology areas. By undergoing the SOC 2 audit, service providers can demonstrate their commitment to meeting stringent security and operational criteria.

The SOC 2 report is issued based on the AICPA’s Trust Services Criteria (TSC), which ensures that various aspects, including security, availability, processing integrity, confidentiality, and privacy, are thoroughly examined and addressed. This comprehensive evaluation allows service providers to showcase their adherence to industry best practices and their dedication to safeguarding client data and systems.

To streamline the certification process and enhance efficiency, service providers have the option of pursuing dual certification. Dual certification refers to obtaining both the Cyber Verify certification and the SOC 2 report simultaneously. This approach offers numerous advantages, including cost-effectiveness and a more comprehensive system that is tailored to the specific needs and practices of managed service providers and cloud providers.