CCSP: Certified Cloud Security Professional

Question

SOC Type 1 reports are regarded as “restricted use” because they are intended only for limited audiences and purposes.

Which of the following is NOT an appropriate population for a SOC Type 1 report?

Explanation

SOC 1 Type 1 reports are intended for the service organization’s management, its user entities, and the user entities’ auditors. Potential clients are not current user entities, so they are not an appropriate intended audience.

CCSP: Certified Cloud Security Professional

AstroTutor

Notes

Readiness

QuestionQ107

Community Discussion