QuestionQ19

VerifiedSecurity and Risk Management

When assessing vendor certifications for the handling and processing of company data, which of the following is the BEST Service Organization Controls (SOC) certification for the vendor to hold?

Explanation

A SOC 2 Type 2 report evaluates controls relevant to security, availability, processing integrity, confidentiality, and privacy, and tests whether those controls operated effectively over a defined period. This provides the most useful assurance for a vendor that handles and processes company data.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!