SOC 2
What is SOC 2?
An AICPA audit report based on the Trust Services Criteria: Security, Availability, Processing Integrity, Confidentiality, and Privacy. The most common assurance report for technology service providers.
Related terms
Frameworks that govern soc 2
What the standards actually require on soc 2
Requirements naming soc 2 across 6 standards, quoted from the control text.
Coordination positions IRS Pub 1075 within the broader US federal + state + and industry security landscape. (1) NIST Standards: NIST SP 800-53 Rev 5 (primary control set incorporated by reference Section 9.3) + NIST SP 800-53A (assessment methodology) + NIST...
IRSPub1075-CoordNIST80053-FedRAMP-FISMA-CJIS-SSACDS-StateRevAgencies-PrivacyAct-SOC2-Industry · IRS Pub 1075 Coordination - NIST SP 800-53 Rev 5 + FedRAMP + FISMA + 26 USC 6103 + FBI CJIS + SSA CDS + State Revenue Agencies + Privacy Act + SOC 2 + Industry Frameworks + Federal Sectoral →STAR Attestation, developed by CSA with the AICPA, is a SOC 2 engagement performed by a CPA firm using the AICPA Trust Services criteria together with the CCM, giving an independent third-party assessment of the cloud provider;
csa-star-security-trust-assurance-and-risk::L2-ATTEST · Obtain STAR Attestation through a SOC 2 examination that adds the CCM criteria, and renew it yearly →HBNR crosswalk to comprehensive security + privacy + health frameworks. NIST CSF 2.0 mapping: GOVERN (privacy officer + IR + records + TPSP) + IDENTIFY (PHR identifiable info inventory + 3rd-party SDK audit + affected individual identification) + PROTECT (encr...
HBNR-Crosswalk-NIST-CSF-ISO-HIPAA · Crosswalk to NIST CSF 2.0, NIST 800-66, ISO 27001/27701, SOC 2 and HIPAA →Management, as the engaging party, settles what the examination covers: the system, the trust services categories included and the period, in the same way as for a SOC 2 engagement (Guide 2.191, with 2.05).
aicpa-soc-3::M-1 · Define what the SOC 3 examination covers →HKMA TM-G-1 Cyber + Audit + Outsourcing + Cloud. (1) SECURITY MONITORING AND SIEM (TM-G-1.7.1) - SIEM + SOC + 24x7 monitoring + log management + correlation + use cases + alert handling + escalation + UEBA + behavior analytics + SOAR automation + threat detect...
HKMA-TMG1-Cyber-Monitoring-Threat-Intel-IR-Audit-Outsource-Cloud · TM-G-1 Security Monitoring + SIEM + Threat Intel + Cyber IR + Audit + Outsourcing + Cloud Computing Risk →Three assessments shape the strategy. First, an initial risk assessment during planning establishes whether the system is GxP regulated, what its impact is, and whether more risk assessment will be needed.
gamp-5-good-automated-manufacturing-practice::6.2.5 · 6.2.5 Determine Strategy for Achieving Compliance and Fitness for Intended Use →Questions people ask about soc 2
What is SOC 2?
Why is SOC 2 important for compliance?
What concepts are related to SOC 2?
Which compliance frameworks address SOC 2?
Where can I learn more about SOC 2?
See how SOC 2 applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.