Each year, a range of third-party audits are performed on BD products and internal cybersecurity controls, including: Service and Organization Controls (SOC technical audit developed by the American Institute of Certified Public Accountants (AICPA) that focuses on the design and operating effectiveness of a company’s controls and includes compliance with the HIPAA security rule.