ExamGecko
Home Home / ISC / CCSP
Question list
Search
Search

Question 403 - CCSP discussion

Report
Export

What are SOC 1/SOC 2/SOC 3?

A.
Audit reports
Answers
A.
Audit reports
B.
Risk management frameworks
Answers
B.
Risk management frameworks
C.
Access controls
Answers
C.
Access controls
D.
Software developments
Answers
D.
Software developments
Suggested answer: A

Explanation:

An SOC 1 is a report on controls at a service organization that may be relevant to a user entity's internal control over financial reporting. An SOC 2 report is based on the existing SysTrust and WebTrust principles. The purpose of an SOC 2 report is to evaluate an organization's information systems relevant to security, availability, processing integrity, confidentiality, or privacy. An SOC 3 report is also based on the existing SysTrust and WebTrust principles, like a SOC 2 report. The difference is that the SOC 3 report does not detail the testing performed.

asked 18/09/2024
Janina Loveria
39 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first