Define the objective
We review the requested report, services and system boundaries, aligning the readiness plan with business owners and the requirements of the intended examination.
SOC 1 · SOC 2 · audit readiness
FillTec provides SOC 1 and SOC 2 audit readiness advisory in Guatemala. We support service organizations that need to organize controls, documentation and evidence to address customer requirements or prepare for independent examination. Work is scoped around the service your business provides and the report you need.
SOC 1 focuses on service organization controls relevant to customers’ internal control over financial reporting. SOC 2 uses the Trust Services Criteria related to security, availability, processing integrity, confidentiality and privacy, according to scope. Preparation must reflect the objective and criteria applicable to the engagement.
Request a scope and quotationWhat we cover
We review the requested report, services and system boundaries, aligning the readiness plan with business owners and the requirements of the intended examination.
We organize policies, ownership and control activities, prioritizing technical and documentation improvements with verifiable evidence of completed changes.
We define records and follow-up to demonstrate control operation. Type II readiness considers evidence needed throughout the examination period.
How we work
We confirm the SOC 1 or SOC 2 objective and the requested report type.
We assess included documentation and controls to identify readiness gaps.
We support approved adjustments and the assignment of owners and records.
We organize evidence and follow-up to address the independent audit firm’s requirements.
Competitive costs
We quote assessment, control improvements and support according to scope and organizational maturity. The fees and examination work of an independent audit firm are considered separately. Phases help prioritize activities and make the cost of preparation clear.
Before you choose a service
SOC 1 addresses controls relevant to user entities’ financial reporting. SOC 2 focuses on applicable Trust Services Criteria for the provider’s system. The choice depends on the service and the information needed by the report’s intended users.
Type I evaluates the description and design of controls as of a specified date. Type II also covers operating effectiveness over a period. SOC 2 Type II readiness therefore requires sustained controls and evidence of their operation.
Our service is advisory and readiness. Examination and report issuance are performed by an independent CPA firm under applicable standards. The outcome depends on evaluated controls and evidence; preparation does not guarantee a particular opinion.
Share the report your customer requires, the services involved and the state of your documentation. We will define a readiness scope and a proposal organized by phases.