We welcome the opportunity to discuss your needs in a scoping meeting of 30 to 60 minutes. Near the close of the scoping meeting or shortly thereafter, we will provide a verbal fee quote. If requested, we will provide a written proposed arrangement letter within a few days.

 

Quotes can be affected by several factors:

 

• Number of audit fieldwork locations to be visited.

• Number and geographical dispersion of IT personnel to be interviewed.

• Number and geographical dispersion of business process personnel to be interviewed (applicable to certain engagements such as security/privacy risk assessments, SOC 2 Confidentiality or Privacy audits and assessments, etc.).

• Scope, complexity, and technological diversity of the IT environment.

• Degree of standardization in IT processes and configuration management across the services and/or system in scope.

• Strength of the general IT controls environment supporting the services and/or system in scope.

• Existence of prior privacy or security breach (unauthorized disclosure) involving personal identifying information or other sensitive or confidential information.

 

Additionally, if a client is required to have more than one of the audits we provide (e.g., both a SOC 1 and a SOC 2 or a SOC 2 audit plus a HIPAA compliance audit), we will structure the engagement team and timing to conduct one audit and produce a "SOC 2 Plus" report or individual reports. This approach will yield the most cost-effective audit fee since there is typically some overlap in audit scopes.

 

Our audits are priced on a fixed fee basis plus expenses. Expenses are a factor in choosing an audit firm if travel is involved. We do our best to minimize travel expenses. For example, if requested, we will conform to your organization’s travel policy or allow your organization to arrange travel for us to ensure the lowest cost air, car, and hotel accommodations available.

​

If you would like to schedule a scoping call or onsite meeting, please Contact us.

​