Severity: Info Draft consultation Global
AICPA publishes Proposed 2027 SOC 2 Trust Services Criteria and expands guidance on SOC services
Original title: AICPA SOC suite / Trust Services Criteria
- Published
- Source: aicpa-cima.com
- Effective
- Not stated
- Deadline
- Not stated
Why it matters
The AICPA has expanded its SOC suite resources page with several new materials, including Proposed 2027 SOC 2 Trust Services Criteria exposure drafts, ethics staff insights on business arrangements with SOC tool providers, and guidance for peer reviewers addressing SOC 2 risks. These additions help CPAs and service organizations navigate professional standards, ethical considerations, and practical risk areas in SOC engagements. The resources also address concerns about quick-turn SOC engagements and unlicensed practitioners in the SOC services market.
What changed
- AICPA publishes Proposed 2027 SOC 2 Trust Services Criteria and Description Criteria as exposure drafts for stakeholder review
- Adds Ethics Staff Insights guidance addressing key ethics considerations and practical risk areas when firms have business arrangements with SOC 2 tool providers
- Releases guidance for peer reviewers to address SOC 2 risks in audit engagements
- Publishes article on risks associated with quick-turn SOC engagements and what CPAs should know
- AICPA announces investigation into allegations about compliance vendor business practices offering SOC services and emphasizes need for thorough evaluation by service organizations
Who is affected
CPAs and CPA firms providing SOC services; service organizations using SOC engagements; peer reviewers; auditors; compliance vendors offering SOC services globally
What to do
AI-assisted summary of the official document; the official text prevails. Not legal advice.