SOC 2 and data security’s impact on insurance companies

Independent security reporting through SOC 2 is critical to the protection of sensitive data. Rich Sowalsky, CISA, senior manager with Baker Tilly Virchow & Krause LLP’s Risk, Internal Audit, and Cybersecurity Group in Philadelphia, discusses SOC 2 Trust Services Criteria and high-level ways service organizations and CPAs can enhance a control environment. Sowalsky will speak at greater length at PICPA’s 2019 Insurance Conference, Dec. 4-5 at Penn State Great Valley in Malvern, Pa.