SOC 2 reports show up constantly in vendor diligence, and they tend to land on legal's desk because nobody else wants to read a hundred pages of control descriptions and testing tables. Most in-house contract attorneys weren't trained to read them. The report is written for auditors, not for the customer trying to decide whether a vendor's security posture is good enough to sign. Knowing which sections carry real information, and what the report leaves out, affects how you advise the business and how you draft the terms that depend on it.
In this webinar, Laura Frederick, Stephanie Woodworth, and Alexandra Sepulveda will walk through how to read a SOC 2 report and use what's in it. They'll cover how Type 1 and Type 2 reports differ in what the auditor tests and where scope gaps tend to show up, how to read the auditor's opinion and the test results, including how much weight an exception in the testing section really carries, and how a report handles subservice organizations, meaning the vendors sitting behind your vendor. The speakers will also discuss complementary user entity controls and why they matter to the customer, what makes a SOC 2 delivery obligation work in practice, how a contract should handle a qualified opinion or a report that has lapsed, and the privacy and security questions a SOC 2 leaves unanswered, including when a customer will need more than a SOC 2 from a vendor.
*Live CLE Credit Information:
How to Contract will apply for 1.25 hours of General CLE credit in TX.
This program is approved for the following:
1.25 hours of General CLE credit in California
1.00 hour of Substantive CLE credit in Pennsylvania
We will provide details to attendees on how to request a certificate of attendance. These certificates are provided after an attendee submits a completed credit request form (including the CLE code words shared live) within 14 days of the live webinar. Late submissions are not accepted.
Lawyers in these other jurisdictions who attend live may be eligible for credit through reciprocity, self-application, or reporting: AK, AL, AR, AZ, CT, CO, FL, GA, HI, IA, ID, IN, IL, KY, LA, NC, NH, NJ, NV, NY, MD, ME, MN, MO, MT, NC, ND, NE, NH, NM, NV, OK, OR, RI, SC, TN, UT, VA, VT, WA, WI, WV, and WY. These programs may also be eligible for Canadian CPD credit in British Columbia, Ontario, and Quebec.
We do not determine individual eligibility. Please check your state bar for specific compliance rules.
