SOC 2 TYPE 2 REPORT - MANAGEMENT’S DESCRIPTION OF MSG91 SOFTWARE APPLICATION CONTROLS - 26th January 2024 - 26th April 2024

Sep 13, 2026

SOC 2 Type 2 report for Walkover Web Solutions Private Limited covering the MSG91 software application and the design and operating effectiveness of controls for security, availability, confidentiality, processing integrity and privacy. The report spans the observation period from 26th January 2024 to 26th April 2024 and includes an independent service auditor’s report, testing descriptions, criteria, inherent limitations, and management assertions. It details system components such as infrastructure, network, software, people, procedures, policies, data, incident management, cryptography, and change management, plus complementary user and subservice organization controls.

LanguageEnglish

CategoryGeneral

FormatPDF

Pages52

Reading Time18 min

AccessFree to download

INDEPENDENT SERVICE AUDITOR’S REPORT

SCOPE

SERVICE ORGANIZATION’S RESPONSIBILITIES

SERVICE AUDITOR’S RESPONSIBILITIES

INHERENT LIMITATIONS

DESCRIPTION OF TESTS OF CONTROLS

OPINION

RESTRICTED USE

MANAGEMENT’S ASSERTION

DESCRIPTION CRITERIA

DESCRIPTION OF WALKOVER WEB SOLUTIONS PRIVATE LIMITED APPLICATIONS

PRINCIPAL SERVICE COMMITMENTS AND SYSTEM REQUIREMENTS

COMPONENTS OF THE SYSTEM USED TO PROVIDE SERVICES

SOC 2 TYPE 2 REPORT Walkover Web Solutions Private Limited SYSTEM AND ORGANIZATION CONTROLS (SOC) 2 TYPE 2 REPORT ON MANAGEMENT’S DESCRIPTION OF ITS MSG91 SOFTWARE APPLICATION And the Suitability of Design of Controls Relevant to the Controls Placed in Operation and Test of Operating Effectiveness Relevant to Security, Availability, Confidentiality For the Observation period : 26th January 2024-26th April 2024 Next Report Issue Date: 27th April 2025 TOGETHER WITH INDEPENDENT SERVICE AUDITORS’ REPORT Table of Contents INDEPENDENT SERVICE AUDITOR’S REPORT 5 SCOPE 6 SERVICE ORGANIZATION’S RESPONSIBILITIES 6 SERVICE AUDITOR’S RESPONSIBILITIES 6 INHERENT LIMITATIONS 7 DESCRIPTION OF TESTS OF CONTROLS 7 OPINION 7 RESTRICTED USE 8 MANAGEMENT’S ASSERTION 10 DESCRIPTION CRITERIA: 11 DESCRIPTION OF WALKOVER WEB SOLUTIONS PRIVATE LIMITED APPLICATIONS 13 PRINCIPAL SERVICE COMMITMENTS AND SYSTEM REQUIREMENTS 13 COMPONENTS OF THE SYSTEM USED TO PROVIDE SERVICES 14 INFRASTRUCTURE 14 NETWORK ARCHITECTURE DIAGRAM 15 SOFTWARE 16 PEOPLE 17 Senior Management 17 Information Security Oficer 17 Compliance Program Manager 17 System Users 17 PROCEDURES AND POLICIES 17 DATA 17 PHYSICAL ACCESS AND ENVIRONMENTAL CONTROLS 8 INCIDENT MANAGEMENT 24 NETWORK OPERATIONS MONITORING 25 CRYPTOGRAPHY 25 CHANGE MANAGEMENT 25 SOFTWARE SECURITY ASSURANCE 26 ASSET MANAGEMENT ( HARDWARE AND SOFTWARE) 26 SYSTEM HARDENING, VULNERABILITY MANAGEMENT AND PENETRATION TESTING 26 ENDPOINT MANAGEMENT 26 AVAILABILITY 19 RELEVANT ASPECTS OF THE CONTROL ENVIRONMENT, RISK ASSESSMENT PROCESS, INFORMATION AND COMMUNICATION, AND MONITORING 19 CONTROL ENVIRONMENT 20 INTEGRITY AND ETHICAL VALUES 20 COMMITMENT TO COMPETENCE 20 SENIOR MANAGEMENT OVERSIGHT 20 MANAGEMENT PHILOSOPHY AND OPERATING STYLE 20 ORGANIZATIONAL STRUCTURE AND ASSIGNMENT OF AUTHORITY AND RESPONSIBILITY 21 HUMAN RESOURCES 21 RISK ASSESSMENT 22 SCOPE 22 VENDOR RISK ASSESSMENT 23 INTEGRATION WITH RISK ASSESSMENT 23 CONTROL ACTIVITIES 23 LOGICAL ACCESS CONTROL 23 INFORMATION AND COMMUNICATION 27 MONITORING CONTROLS 27 DISCLOSURE OF INCIDENTS 27 COMPLEMENTARY USER ENTITY CONTROLS 28 COMPLEMENTARY SUBSERVICE ORGANIZATION CONTROLS(CUECS) 29 TESTS OF OPERATING EFFECTIVENESS AND RESULTS OF TESTS 31 SCOPE OF TESTING 31 TESTS OF OPERATING EFFECTIVENESS 31 SAMPLING 32 SECURITY PRINCIPLE AND CRITERIA TABLE 32 SECTION 1 INDEPENDENT SERVICE AUDITOR’S REPORT INDEPENDENT SERVICE AUDITOR’S REPORT To : Walkover Web Solutions Private Limited. Scope We have examined the accompanying “Description of Walkover Web Solutions Private Limited, MSG91 Software Application. ” Throughout the period “26th January 2024 - 26th April 2024”, and the suitability of the design and operating effectiveness of controls to meet Walkover Web Solutions Private Limited service commitmentsand system requirements based on the criteria for Security, Confidentiality, Availability, Processing Integrity & Privacy principles set forth in TSP Section 100 Principles and Criteria, Trust Services Principles and Criteria for Security, Confidentiality and Availability (applicable trust services criteria) throughout the period 26th January 2024-26th April 2024. Walkover Web Solutions Private Limited uses, ● Amazon Web services(AWS) , a subservice organization which provides on-demand cloud computing platforms and APIs to individuals, companies, and governments, on a metered, pay-as-you-go basis via Software-As-A-Service (SaaS) . ● Github(Github Inc) , is a platform and cloud-based service for software development and version control using Git, allowing developers to store and manage their code. ● MongoDB is a source-available, cross-platform, document-oriented database program. Classified asa NoSQL database product, MongoDB utilizes JSON-like documents with optional schemas. MongoDB is developed by MongoDB Inc. and current ver

FAQs

What is the scope and observation period covered by this SOC 2 Type 2 report?

The report covers the MSG91 software application and the suitability of the design and operating effectiveness of relevant controls for the period from 26th January 2024 to 26th April 2024.

Which control areas are evaluated in relation to the trust services principles?

The evaluation relates to security, availability, confidentiality, processing integrity, and privacy, based on the applicable trust services criteria and description criteria.

What kinds of supplementary controls are addressed besides the service organization’s own controls?

The report includes complementary user entity controls and complementary subservice organization controls (CUECs), while clarifying that actual subservice/user entity controls are not disclosed and are not evaluated as part of the examination.

Sep 13, 2026

Upload by Berry Peter