It is the international counterpart of SOC 1, not SOC 2, and many audit firms issue a single report that meets both. A service that does not affect customers' financial statements usually needs a security report instead.
See ISAE 3000 for security assurance outside the US.
Related terms
- SOC 1
- SOC 1 is a CPA firm's report on a service organization's controls that are relevant to its customers' internal control over financial reporting.
- ISAE 3000
- ISAE 3000 is the IAASB's international standard for assurance engagements on subject matter other than historical financial information.
All glossary terms
