Throughout the COVID-19 pandemic, organizations received many different kinds of government assistance. The Paycheck Protection Program (PPP), Provider Relief Fund (PRF), Employee Retention Credit (ERC), and COVID-19 Economic Injury Disaster Loans (EIDL), to name a few. These funds were crucial to helping minimize the impact of business interruptions from COVID. Since each type of assistance had its own rules and regulations, ensuring compliance with each can be difficult.
In the previous blogs of this series, several aspects of SOC examinations were explored. This portion will include an in depth look at the contents of a SOC 2 report.
In the previous blogs in this series, several aspects of SOC examinations were explored. This portion will include an in depth look at the contents of a SOC for Cybersecurity report.
In the second blog of this series, ‘What is the ROI of a SOC Report?’,' the benefits of a SOC examination were discussed. Now that you know the value of SOC examinations, we we will cover the process and duration of getting a SOC engagement.
The first blog in this series ‘What is the ROI of a SOC report?’ asked the question: When your company suffers a cyber-attack, do you know what to do?
With every passing day, more headlines emerge about cyberattacks compromising a seemingly endless array of entities. This problem seems as though it is only getting worse as individuals, corporations, and governments find themselves increasingly vulnerable to sophisticated attacks on their data and resources. The paradigm is changing from ‘if’ an entity will suffer an attack, to ‘when’ will the attack happen?
Internet-connected devices or Internet of Things (IoT) devices are popular holiday gifts. Now that the holidays are over, our shiny new tablets, phones, smart TVs, watches, and toys are providing hours of entertainment. Before the boxes and instruction manuals are long gone, it is the perfect time to make sure they are secure! These devices usually require personal and/or financial information to complete setup, which includes sending that information over the internet. Without thinking about it, we put in a credit card number or create a password in our haste to play with our new toy or satisfy an impatient child. Security of this sensitive information now resides with the manufacturer or service provider who is charged with keeping it safe from a cyberattack. Attacks and breaches happen every day and are frequently in the news.
Do your employees use smart phones for their jobs? Are they processing payments, looking up information, and contacting customers online? If so, you need to up your security game, and make sure that your security architecture includes your employees’ smart phones. Here are some issues you could encounter, and how to solve them:
As a small business owner, it can be easy to neglect internal controls in your business. You’re running a small company, and you probably know your co-workers well. You may even hang out on weekends. However, that doesn’t mean that every employee should have access to all of your business systems, and nowhere is that more true than your accounting system.
If you are involved in any 501(c)(3) organization, you’ll want to read this information carefully. Soon you will no longer need to disclose the names and addresses of your donors on Schedule B of Form 990 or Form 990-EZ. Public information on 501(c) organizations will still be available. This includes information on whether one or two donations are significantly larger than other contributions to the organization.
Topics: Not-for-Profits