CCSP: Certified Cloud Security Professional

A SOC Type 2 examination assesses whether relevant controls operated effectively throughout a reporting period, rather than only assessing their design at a single date. Six months is the conventional minimum reporting period used for a Type 2 report; a one-year period is common but is not the minimum. AICPA materials distinguish Type 1 examinations, which evaluate controls as of a specific date, from Type 2 examinations, which include operating effectiveness over a period.