Match correct purposes, contents, and users regarding SOC reports. Purposes/Contents/Users a. Easy to read by the general

Match correct purposes, contents, and users regarding SOC reports.

Transcribed Image Text:

Purposes/Contents/Users a. Easy to read by the general public in a summary format on security, availability, processing integrity, and confidentiality or privacy b. To assess governance, risk management, and compliance programs c. Reports for a period of time: d. To provide a general understanding and for marketing purposes e. To be used by the auditors and the management of the user company f. Reports for a specific date g. To be used by the management of a service organization, regulators, and others h. To examine security, availability, processing integrity, confidentiality or privacy policy, and practice of the service organization SOC Reports i. SOC 1 ii. SOC 2 iii. SOC 3 iv. Type 1 SOC reports v. Type 2 SOC reports