The session will focus on the discussion of the various types of SOC reports and their uses/structure, and leveraging of SOC reports as part of third party/vendor risk management process. In addition, there will be a discussion on the ISO/IEC 27001 background and related standards.