SOC 1
What is SOC 1?
An AICPA audit report on controls at a service organisation relevant to user entities' financial reporting. Available as Type I (design only) or Type II (design and operating effectiveness).
Related terms
Frameworks that govern soc 1
What the standards actually require on soc 1
Requirements naming soc 1 across 2 standards, quoted from the control text.
The description presents how the reports and other information delivered to user entities are prepared, since those outputs are what user entities record in their own books.
soc-1-ssae-18::B.5 · SOC 1 B.5 Describe the process used to prepare reports and other information for user entities →Institutions manage the audit control of their key technology service providers by auditing the provider directly, engaging external auditors to evaluate it, or obtaining and reviewing sufficiently detailed independent audit reports on it;
ffiec-it-examination-handbook::AUD-18 · Third-Party Reviews of Technology Service Providers (Audit) →Questions people ask about soc 1
What is SOC 1?
Why is SOC 1 important for compliance?
What concepts are related to SOC 1?
Which compliance frameworks address SOC 1?
Where can I learn more about SOC 1?
See how SOC 1 applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.