Detecting Fraud in the Dealership: Red Flags in Parts, Service and F&I
Detecting Fraud in the Dealership: Red Flags in Parts, Service, and F&I
March 30, 2026
UPDATES + INSIGHTS
Read on for insights and tips in recent blog posts from Larson & Company on a variety of accounting and advisory topics.
.jpeg?width=1080&height=1080&name=image_adobe_express%20(9).jpeg)
Comprehensive Cybersecurity Compliance: WISP, SOC 2, ISO 27001 & NIST
Article Summary
- WISP Fundamentals: A Written Information Security Plan (WISP) is a formal, documented cybersecurity strategy that outlines how an organization identifies, assesses, and manages risks to protect sensitive data — an essential foundation for any internal control or compliance program.
Master SOC Reporting: Subservice Orgs and Trust Criteria Tips
Article Summary
- Explains how to determine whether a vendor qualifies as a Subservice Organization in SOC 1 and SOC 2 reports.
- Defines Subservice Organizations based on AICPA SOC Audit Guides, emphasizing “relevant” and “necessary” controls.
- Identifies two key factors: whether vendor controls are...
SOC Reports Explained: A Guide to SOC 1 & 2, and SOC Compliance Basics
Article Summary
- Purpose and Value of SOC Reports – SOC (System and Organization Controls) reports are independent audit reports that provide assurance about a service organization’s internal controls, helping build trust with customers, partners, and auditors.
- Differences Between SOC Types – The...
.png){kind=logo}
.png)
