Understanding Subservice Organizations Within Vendor SOC Reports

Your organization outsources products/services to third parties so that you can provide the best products/services to your customers. Likewise, your third parties may outsource a portion of those services to a third party, making them your fourth party or subservice organization.

Understand what subservices your vendors use and the controls they're responsible for by reviewing a SOC report. This is important in case it includes critical items affecting your business. 

Download the infographic to learn: 

• What a subservice organization is and examples
• Where to find information on subservice organizations within SOC reports
• An understanding of complementary subservice organization controls