Your client, the a cloud source application service part provider of customer relationship management (CRM) software needs to have a SOC 2 Type 2 audit conducted. This is the first time the client has engaged a professional services firm for an audit.

Explain to the client what drives the scope of an audit and create a table of 7 domains with and example of an item that might be part of an audit?