QuestionQ150

VerifiedLegal, Risk and Compliance

Which type of SSAE audit report would be most helpful to a cloud customer, even though the cloud provider is unlikely to share it?

Explanation

A SOC 2 Type 2 report provides detailed assurance about controls relevant to security, availability, processing integrity, confidentiality, and privacy, including whether those controls operated effectively over a period. Its detailed nature makes it more useful for customer risk assessment but less likely to be broadly distributed. A SOC 3 report is a less-detailed general-use report, and SOC 1 reports focus on controls relevant to financial reporting.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!