Stay Safe This Tax Season: The IRS Dirty Dozen Scams to Know
Stay Safe This Tax Season: The IRS Dirty Dozen Scams to Know
March 27, 2026
UPDATES + INSIGHTS
Read on for insights and tips in recent blog posts from Larson & Company on a variety of accounting and advisory topics.
.jpeg?width=1080&height=1080&name=image_adobe_express%20(9).jpeg)
Comprehensive Cybersecurity Compliance: WISP, SOC 2, ISO 27001 & NIST
Article Summary
- WISP Fundamentals: A Written Information Security Plan (WISP) is a formal, documented cybersecurity strategy that outlines how an organization identifies, assesses, and manages risks to protect sensitive data — an essential foundation for any internal control or compliance program.
Master SOC Reporting: Subservice Orgs and Trust Criteria Tips
Article Summary
- Explains how to determine whether a vendor qualifies as a Subservice Organization in SOC 1 and SOC 2 reports.
- Defines Subservice Organizations based on AICPA SOC Audit Guides, emphasizing “relevant” and “necessary” controls.
- Identifies two key factors: whether vendor controls are...
SOC Reports Explained: A Guide to SOC 1 & 2, and SOC Compliance Basics
Article Summary
- Purpose and Value of SOC Reports – SOC (System and Organization Controls) reports are independent audit reports that provide assurance about a service organization’s internal controls, helping build trust with customers, partners, and auditors.
- Differences Between SOC Types – The...
SOC 2, SOC 3 & Cybersecurity Audits: Complete Business Guide
Article Summary
- SOC Framework Overview: SOC reports are independent audits of internal controls relevant to security, availability, processing integrity, confidentiality, and privacy, with criteria defined by the AICPA.
- New SOC 2 Trust Service Criteria: Recent updates have clarified the Trust...
SOC Audit Preparation: Timeline, Readiness, and GRC Guide
Article Summary
- SOC audits require significant preparation and planning. From readiness assessments to audit fieldwork and reporting, the full SOC journey can take several months to over a year depending on scope, control maturity, and whether the organization is pursuing a Type I or Type II...
.png){kind=logo}
.png)
