SOC 2
An independent audit report, defined by the AICPA, on how well a service company controls security and related areas such as availability and confidentiality. A Type II report covers how the controls worked over a period, typically several months. Why it matters: Buyers often require it before granting a vendor access to cloud accounts or billing data.
1 lesson reference ← Back to glossary
Where it appears
Read the term in context.
Each row is a lesson that uses this term. The lesson where it first appears is the canonical definition.