CISSP: Certified Information Systems Security Professional

A SOC 2 report provides detailed attestation on a service organization’s controls relevant to security, availability, processing integrity, confidentiality, and privacy—the control areas most relevant to an IDaaS service. SOC 3 is a less-detailed general-use report, while SOC 1 addresses internal control over financial reporting.