Download Publication
Illustrative Type 2 SOC 2® Report: With the Additional Criteria in the Cloud Security Alliance (CSA) Cloud Controls Matrix (CCM)
Release Date: 01/08/2023
In the following illustrative type 2 SOC 2 report, the service auditor is reporting on:
- The fairness of the presentation of the service organization’s description of its system based on the description criteria identified in management’s assertion;
- The suitability of the design and operating effectiveness of its controls stated in the description to provide reasonable assurance that service commitments and system requirements were achieved based on trust services criteria relevant to security and availability, set forth in TSP Section 100, 2017 Trust Services Criteria, for Security, Availability, Processing Integrity, Confidentiality, and Privacy (AICPA, Trust Services Criteria); and, controls stated in the description were implemented
Download this Resource
Prefer to access this resource without an account? Download it now.
Share
Related resources
Are you a research volunteer? Request to have your profile displayed on the website here.
Related Certificates & Training
Learn the core concepts, best practices and recommendation for securing an organization on the cloud regardless of the provider or platform. Covering all 14 domains from the CSA Security Guidance v4, recommendations from ENISA, and the Cloud Controls Matrix, you will come away understanding how to leverage information from CSA's vendor-neutral research to keep data secure on the cloud.
Learn more
Learn more