--- title: Should your business security systems provider have a SOC audit? description: DGA explains the importance of SOC audits for your business' security plan so you can determine when your business or security provider should have one. image: https://blog.dga.com/hubfs/server%20image%20small.jpg --- [![cropped-DGA-Security-Logo-nsr-1-1](https://blog.dga.com/hubfs/Assets/logo/cropped-DGA-Security-Logo-nsr-1-1.png)](https://www.dga.com/) Search For: - [Contact](https://www.dga.com/contact/) - [Login](https://connect.dga.com/) - [Careers](https://www.dga.com/careers/) [Get A Free Consultation](https://www.dga.com/free-consultation/) - [Business Security](https://www.dga.com/business-security/) - [Intrusion Alarms](https://www.dga.com/business-security/intrusion-alarms/) - [Video Surveillance](https://www.dga.com/business-security/video-surveillance/) - [Access Control](https://www.dga.com/business-security/access-control/) - [Security System Monitoring](https://www.dga.com/business-security/alarm-monitoring/) - [Environmental Monitoring](https://www.dga.com/business-security/environmental-monitoring/) - [Elevator Emergency Communication](https://www.dga.com/business-security/elevator-emergency-communication/) - [Fire Systems](https://www.dga.com/fire-systems/) - [Design and Installation](https://www.dga.com/fire-systems/design-installation/) - [Testing and Inspection](https://www.dga.com/fire-systems/testing-and-inspection/) - [Fire Alarm System Monitoring](https://www.dga.com/fire-systems/alarm-monitoring/) - [Contractor Support](https://www.dga.com/fire-systems/contractor-support/) - [Industries](https://www.dga.com/industries/) - [Art Galleries](https://www.dga.com/industries/art-gallery-security/) - [Banking and Financial](https://www.dga.com/industries/bank-security/) - [Cannabis](https://www.dga.com/industries/cannabis-security/) - [Hotels](https://www.dga.com/industries/hotel-security/) - [Jewelry](https://www.dga.com/industries/jewelry-security/) - [Nonprofits](https://www.dga.com/industries/nonprofit-security/) - [Offices](https://www.dga.com/industries/office-security/) - [Property Management](https://www.dga.com/industries/property-security/) - [Religious Institutions](https://www.dga.com/industries/religious-institution-security/) - [Restaurants](https://www.dga.com/industries/restaurant-security/) - [Retail](https://www.dga.com/industries/retail-security/) - [Tools](https://www.dga.com/tools) - [DGA Blog](https://blog.dga.com) Search For: [Business Security](https://www.dga.com/business-security/) Business Security [Intrusion Alarms](https://www.dga.com/business-security/intrusion-alarms/) [Video Surveillance](https://www.dga.com/business-security/video-surveillance/) [Access Control](https://www.dga.com/business-security/access-control/) [Security System Monitoring](https://www.dga.com/business-security/alarm-monitoring/) [Environmental Monitoring](https://www.dga.com/business-security/environmental-monitoring/) [Elevator Emergency Communication](https://www.dga.com/business-security/elevator-emergency-communication/) [Fire Systems](https://www.dga.com/fire-systems/) Fire Systems [Design and Installation](https://www.dga.com/fire-systems/design-installation/) [Testing and Inspection](https://www.dga.com/fire-systems/testing-and-inspection/) [Fire Alarm System Monitoring](https://www.dga.com/fire-systems/alarm-monitoring/) [Contractor Support](https://www.dga.com/fire-systems/contractor-support/) [Industries](https://www.dga.com/industries/) Industries [Art Galleries](https://www.dga.com/industries/art-gallery-security/) [Banking and Financial](https://www.dga.com/industries/bank-security/) [Cannabis](https://www.dga.com/industries/cannabis-security/) [Hotels](https://www.dga.com/industries/hotel-security/) [Jewelry](https://www.dga.com/industries/jewelry-security/) [Nonprofits](https://www.dga.com/industries/nonprofit-security/) [Offices](https://www.dga.com/industries/office-security/) [Property Management](https://www.dga.com/industries/property-security/) [Religious Institutions](https://www.dga.com/industries/religious-institution-security/) [Restaurants](https://www.dga.com/industries/restaurant-security/) [Retail](https://www.dga.com/industries/retail-security/) [Tools](https://www.dga.com/tools) [DGA Blog](https://blog.dga.com) [Contact](https://www.dga.com/contact/) [Login](https://connect.dga.com/) [Careers](https://www.dga.com/careers/) Get A Free Consultation - Categories [Subscribe](https://info.dga.com/blog-subscriptions) - [Access Control](https://blog.dga.com/tag/access-control) - [Fire Systems](https://blog.dga.com/tag/fire-systems) - [Intrusion Alarms](https://blog.dga.com/tag/intrusion-alarms) - [Video Surveillance](https://blog.dga.com/tag/video-surveillance) - [Security Terms](https://blog.dga.com/tag/security-terms) [«  View All Posts](https://blog.dga.com) # Should your business security systems provider have a SOC audit? - Share This Article - - - - [mailto:?body=https://blog.dga.com/should-business-security-systems-provider-have-soc-accreditation](mailto:?body=https://blog.dga.com/should-business-security-systems-provider-have-soc-accreditation) January 4th, 2022 | 7 min. read ![Should your business security systems provider have a SOC audit?](https://blog.dga.com/hubfs/server%20image%20small.jpg) ![Blog Feature](https://cdn2.hubspot.net/hubfs/298890/blog-files/blog--cards-feature.png) [Subscribe](https://info.dga.com/blog-subscriptions) ![Steve Bartlett](https://blog.dga.com/hubfs/Steven%20Bartlett.jpeg "Steve Bartlett") [Steve Bartlett](https://blog.dga.com/author/steve-bartlett) Steve Barlett is Director of Application Development at DGA Security with 15+ years of experience at DGA and even more in information technology and application development. If you're reading this article, you might be wondering if your security provider has a SOC report, why security providers should undergo SOC audits, or even what a SOC audit is. While we don’t offer SOC audits at DGA, they are something we highly recommend to businesses dealing with sensitive information.  There are a few reasons why security providers should undergo SOC audits, all of which we'll elaborate on later.  1. To improve security 2. To help you self-audit and remediate security gaps Security breaches can be catastrophic for organizations of any size. In 2013, Target was hacked through a third-party HVAC vendor, leaking data on millions of consumer credit cards. Target had to pay $18.5 *million* out to the government along with hefty legal fees as a result. On top of that, imagine how much Target’s image was tarnished and the amount of revenue lost during and after the incident.  In this age of connectedness, the security mistakes of your vendors can quickly become your security problems. This is just one reason SOC audits are gaining popularity as a way to gauge security in all industries, especially for those that deal with particularly large amounts of money or sensitive information.  ### **What is a SOC Audit?** A SOC (Service Organization Controls) audit is a voluntary process overseen by the AICPA (American Institute of Certified Public Accountants) regarding a service organization's ability to protect the sensitive data of its customers.  There are three main kinds of SOC audits: SOC 1 (financial), SOC 2 (security), and SOC 3 (general). Additionally, there are also specialty SOC audits for industries like cybersecurity.  Within these three main SOC audits, there are two types, **type 1** and **type 2**.   You can think of a **type 1** audit as a snapshot in time of how a security organization has designed its security controls. Organizations often use this to prepare for a type 2 audit.  A **type 2** audit goes further and takes place over a longer period to verify that all the documented designs work effectively. For instance, a type 1 audit might reveal that a company deletes personal information when an employee leaves, whereas a type 2 audit will verify that the information is deleted in a timely and effective manner.   ### **So how does an organization complete and pass a SOC audit?** Unlike a standardized test, the CPA in charge of the audit custom-designs an audit for an organization using a methodology that uses **trust services criteria,** a group of security categories that consists of security, availability, confidentiality, processing integrity, and privacy.  Over a few months, the auditor will investigate a business’s security practices. They might ask how it physically protects areas where backup media is stored or what information is included in a visitor log and how long that information is retained.  To pass the audit, organizations must pass at least two trust services criteria, which are chosen based on the mission of the business and customer needs. For instance, we chose security and availability as our trust services criteria because we believe that these are most important to our clients.  ### **Why is the SOC audit important?** Now that you understand the basics of the SOC audit, how can having a SOC audited security provider help you and your organization?  First, it **proves that your vendors are following proper security protocols around the service they provide.** Even if you have impeccable security controls, if just one of your vendors has poor security, you are at risk. The best way to defend against this is to make sure to leave no cracks by ensuring your vendors are secure.  Second, a SOC audit is a fantastic way to **self-audit and remediate security gaps** to better protect yourself and your customers.  ### **Where does a company like DGA Security come in?** As an example, let’s say DGA Security secures XYZ Company with intrusion alarm, access control, and video surveillance systems. When XYZ Company undergoes a SOC 2 audit, it will need physical layouts with the location of every security device provided by DGA. Not all security companies are prepared to deal with customers having SOC audits, but DGA has that data in-house and can deliver it upon request.  ### **How do I access a SOC report?** Generally, you should try to get into contact with the service organization that received the report to request it. For SOC 1 and SOC 2 reports, you may need to sign a non-disclosure agreement first. Some prominent organizations like Salesforce have their SOC reports posted right on the website.  ### **Key Takeaways** So, what are the key takeaways from all of this? We know we just threw a lot of terms at you, so let's break it all down once more. - A SOC audit is an important part of a modern security posture that helps reveal security gaps that could cost you millions. - When looking for a security provider, try to find one that is SOC 2 type 2 audited. This type of audit documents an ongoing examination of an organization's security protocols. - If SOC reports are not already available on the provider’s website, request SOC reports from the organizations themselves. A SOC audit is increasingly becoming a standard amongst industries that deal with highly-sensitive data, which nowadays includes just about every industry. Get ahead of the trend and ensure your vendors, especially your security providers, have SOC audits available.  ### **Have questions about physical security for your premises?** We'd be happy to help. Submit your question using our [online form](https://www.dga.com/free-consultation/) or call us at 800-PICK-DGA (800-742-5342) to speak with one of DGA’s experienced business security experts.   ### **Related Articles** [Tips for Protecting High-Security Areas Within Your Business](https://blog.dga.com/tips-for-protecting-high-security-areas-within-your-business) [![DGA Security](https://blog.dga.com/hubfs/Assets/logo/cropped-DGA-Security-Logo-nsr-1-1.png)](https://www.impactbnd.com) 429 West 53rd Street New York, New York 10019 ##### Contact Sales 800 PICK DGA (800-554-5599) sales@dga.com ##### Contact Customer Care [customercare@dga.com](mailto:customercare@dga.com) 800-221-2300 ##### [Business Security](https://www.dga.com/business-security/) - [Intrusion Alarms](https://www.dga.com/business-security/intrusion-alarms/) - [Video Surveillance](https://www.dga.com/business-security/video-surveillance/) - [Access Control](https://www.dga.com/business-security/access-control/) - [Security System Monitoring](https://www.dga.com/business-security/alarm-monitoring/) - [Environmental Monitoring](https://www.dga.com/business-security/environmental-monitoring/) - [Elevator Emergency Communication](https://www.dga.com/business-security/elevator-emergency-communication/) - [Nationwide Service](https://www.dga.com/business-security/nationwide-service/) - [The DGA Vault at 580 Fifth Avenue](https://www.dga.com/vault/) ##### [Fire Alarm Systems](https://www.dga.com/fire-systems/) - [Design and Installation](https://www.dga.com/fire-systems/design-installation/) - [Testing and Inspection](https://www.dga.com/fire-systems/testing-and-inspection/) - [Fire Alarm System Monitoring](https://www.dga.com/fire-systems/alarm-monitoring/) - [Contractor Support](https://www.dga.com/fire-systems/contractor-support/) ##### [Industries](https://www.dga.com/industries/) - [Art Galleries](https://www.dga.com/industries/art-gallery-security/) - [Banking and Financial](https://www.dga.com/industries/bank-security/) - [Cannabis](https://www.dga.com/industries/cannabis-security/) - [Hotels](https://www.dga.com/industries/hotel-security/) - [Jewelry](https://www.dga.com/industries/jewelry-security/) - [Nonprofits](https://www.dga.com/industries/nonprofit-security/) - [Offices](https://www.dga.com/industries/office-security/) - [Property Management](https://www.dga.com/industries/property-security/) - [Religious Institutions](https://www.dga.com/industries/religious-institution-security/) - [Restaurants](https://www.dga.com/industries/restaurant-security/) - [Retail](https://www.dga.com/industries/retail-security/) ##### [Tools & Training](https://www.dga.com/tools/) - [DGAConnect Login](https://connect.dga.com/) - [DGAOneVIEW Login](https://dgaoneview.com/login#) - [DGA Payment Login](https://payment.mydga.com/login.aspx) - [Free System Training](https://www.dga.com/free-system-training) ##### [About DGA](https://www.dga.com/company/) - [Blog](https://blog.dga.com/) - [Careers](https://www.dga.com/careers/) - [Credentials](https://www.dga.com/credentials/) - [Meet Business Insurance Requirements](https://www.dga.com/meet-business-insurance-requirements/) © 2026 DGA Security Systems, Inc. | [Privacy Policy and Terms of Use](https://www.dga.com/privacy-policy/)