Our Internal Audit Confirms SOC Alignment
Our internal audit has confirmed alignment with the applicable System and Organization Controls (SOC) criteria within the scope reviewed. This outcome marks an important step in our commitment to responsible operations, sound governance, and the trust our customers and partners place in us.
For organizations that depend on service providers, trust involves practical questions: How are responsibilities assigned? How are risks managed? What controls support the services being delivered? How does an organization assess whether its practices meet its commitments? SOC alignment provides a structured basis for addressing these questions, while internal audit brings an additional layer of scrutiny to the areas assessed.
Our internal audit’s conclusion reinforces the importance of evaluating our practices against defined criteria. It also provides a foundation for continued improvement as our organization, services, and operating environment evolve.
What SOC alignment means
SOC is a framework developed by the American Institute of Certified Public Accountants to support the evaluation and reporting of controls at service organizations. The applicable criteria depend on the framework and the activities being assessed. These criteria give organizations a consistent reference for examining relevant controls and connecting operational practices with their stated objectives.
Alignment means that the areas assessed are consistent with the applicable criteria. Its significance comes from that connection between a defined expectation and the practices reviewed against it. For customers and partners, this creates a clearer basis for understanding how an organization approaches its responsibilities.
Our statement of alignment reflects the scope of our internal audit. Scope gives an assessment its meaning by identifying the systems, services, processes, or organizational activities to which its conclusion applies. Keeping the conclusion connected to that scope makes our communication more precise and helps stakeholders interpret the result appropriately.
The role of internal audit
Internal audit plays an important role in this process. It gives an organization a structured opportunity to examine its practices, challenge assumptions, and evaluate alignment with established expectations. It can also help management understand where responsibilities, procedures, and oversight need further attention.
The confirmation of alignment is therefore a useful point of accountability. It gives us a basis for discussing the areas reviewed and reinforces the value of examining our operations with discipline. The result matters because it connects our commitment to responsible practices with an internal assessment against relevant criteria.
Controls in everyday operations
A strong control environment depends on how people carry out their responsibilities every day. Policies establish expectations, procedures guide execution, and oversight helps maintain consistency. These elements work together: a clearly written policy needs an understandable process, and an established process needs people who know when and how to follow it.
Across a SOC-aligned approach, the relevant operational questions may include who can authorize an activity, how changes are approved, how exceptions are handled, and how concerns reach the people responsible for addressing them. The specific controls depend on the scope and criteria involved. Their common purpose is to make important activities more consistent, accountable, and capable of being evaluated.
This is why alignment has value beyond an audit conclusion. It encourages an organization to connect individual activities to broader objectives. Clear responsibilities support better decisions. Consistent processes reduce uncertainty. Appropriate records help explain what happened and why. Together, these practices strengthen the foundation on which dependable services are built.
What this means for customers and teams
For customers and partners, our internal audit’s confirmation provides relevant information for conversations about governance and operational accountability. Organizations evaluating a service provider need to understand how that provider approaches risk and how its practices relate to recognized criteria. A clearly scoped statement of alignment can support those discussions and help make due diligence more focused.
The result also matters internally. Teams benefit from shared expectations and a common understanding of responsibility. When control objectives are understood, employees can better recognize how their work contributes to the organization’s commitments. Alignment becomes more useful when it informs everyday decisions, including how teams introduce changes, handle exceptions, and escalate concerns.
Maintaining alignment as we grow
Maintaining alignment requires continued attention. Organizations change as they introduce services, adopt technology, adjust processes, and take on new responsibilities. Those changes can affect the assumptions behind existing controls. A practice that was appropriate for one operating environment may need to be reconsidered as that environment develops.
We view the internal audit’s confirmation as a foundation for that continuing work. Sustaining alignment means keeping relevant expectations connected to current operations and using future reviews to inform improvement. It also means treating questions and observations as opportunities to strengthen how responsibilities are carried out.
Leadership has an important role in setting expectations and supporting accountability. Operational teams translate those expectations into daily practice. Employees contribute through the decisions they make and the processes they follow. This shared responsibility helps make alignment part of the organization’s way of working.
Our internal audit’s confirmation of SOC alignment is a meaningful milestone. It supports a clear statement about the areas reviewed and strengthens the basis for ongoing conversations with customers, partners, and our teams. We will use this outcome to guide our continued focus on responsible operations, effective oversight, and the consistent practices that sustain trust.