SOC Reporting Frameworks and Standards

Question 1

Which of the following SOC reports is specifically designed for internal control over financial reporting (ICFR)?

Accepted Answer

SOC 1

Answer

SOC 2

Answer

SOC 3

Answer

SOC for Cybersecurity

Question 2

Which of the following Trust Services Criteria is NOT part of a SOC 2 report?

Accepted Answer

Reliability

Answer

Security

Answer

Availability

Answer

Privacy

Question 3

Who is the intended audience for a SOC 3 report?

Accepted Answer

The general public

Answer

Internal audit teams

Answer

User entities and their auditors

Answer

Board of directors only

Question 4

What framework forms the basis for the Trust Services Criteria used in SOC 2?

Accepted Answer

COSO

Answer

NIST Cybersecurity Framework

Answer

COBIT

Answer

ISO/IEC 27001

Question 5

Which SOC report type evaluates a service organization's system and the suitability of controls at a point in time?

Accepted Answer

SOC 1 Type I

Answer

SOC 1 Type II

Answer

SOC 2 Type II

Answer

SOC for Supply Chain

Question 6

Which organization developed the SOC reporting framework?

Accepted Answer

AICPA

Answer

ISACA

Answer

NIST

Answer

ISO