1. CPAs may issue service organization control (SOC) reports. A (BLANK) report is in essence a Trust Service report for general use related to security, availability, processing integrity, confidentiality, and/or privacy.

a. adverse

b. agreed-upon procedures

c. assertion

d. attestation risk

2. Suitable criteria are those that are objective and permit reasonably:

a. adverse

b. agreed-upon procedures

c. assertion

d. attestation risk

3. To present a report that includes an assertion about internal control over compliance, management should evaluate the company's internal control using some appropriate (BLANK).

a. adverse

b. agreed-upon procedures

c. assertion

d. attestation risk