SOC 2 Certified MSP

EPC received third-party, best-practice guidance. Our team participated and contributed to the process. We documented all internal processes and procedures, as well as tools and systems. The Unified Certification Standard (UCS) for Cloud and Managed IT Service Providers verified that we met the following:

• Objective 1: Governance
• Objective 2: Policies and Procedures
• Objective 3: Confidentiality and Privacy
• Objective 4: Change Management
• Objective 5: Service Operations Management
• Objective 6: Information Security
• Objective 7: Data Management
• Objective 8: Physical Security
• Objective 9: Billing and Reporting
• Objective 10: Corporate Health

The next step in the process was an audit of all processes and procedures, as well as tools and systems by a third-party verification organization. It was then confirmed that all requirements were in place.

A 30+ page verification report was created documenting that EPC is in compliance with the UCS. We then received a 50+ page SOC 2 report that we can provide to our clients. This was an important part of the process for us – transparency. We wanted to make sure that we would have a comprehensive report available to our current and future clients so that they feel comfortable with the viability and credibility of our services.