What distinguishes a 'Type I' internal controls report (SOC 1 Type I) from a 'Type II' report?
-
A
Type I reports on control design at a point in time; Type II reports on design and operating effectiveness over a period
-
B
Type I covers financial controls only; Type II covers all operational controls
-
C
Type I is performed by internal auditors; Type II requires external auditors
-
D
Type I is required annually; Type II is optional and performed on request