Assume that you are an IT auditor on the audit of Loy and Cummings, Incorporated

Assume that you are an IT auditor on the audit of Loy and Cummings, Incorporated (Hereafter
LC). You are part of the user auditor team. LC is a publicly traded company. LC uses
Microsoft for cloud computing. Microsoft has hired a CPA firm (service auditor) to prepare a
SOC report. The cloud environment hosts the accounting data of LC and is thus material to
internal controls over financial reporting.
Write a memo to the file for the following items:
1. Write a work paper/memo on whether the components of AS 2601 paragraph 44 were met
by the service auditor for the SOC 1 report. Create audit work paper documentation
(could be a memo or a checklist with references to page numbers) for your supervisor so
that the supervisor can easily see that the items listed in paragraph 44 were indeed met.
2. Suppose you are the vendor manager for the user organization. Related to the SOC 2
report, write a memo to your boss about your review of the SOC 2 report and whether
you should continue to use this service from this provider. Base your assessment only on
the control strengths or weaknesses identified in the SOC 2 report. Justify your position
and conclude the memo with a recommendation.
Use the documents uploaded to write the memos