SOC 2 is an attestation report, defined by the AICPA and issued by an independent CPA firm, that evaluates a service provider's controls against the Trust Services Criteria: security, availability, processing integrity, confidentiality and privacy. Type I reviews their design on a given date and Type II how effectively they operate over a period, typically 6 to 12 months; SOC 1, by contrast, focuses on financial reporting controls.
How TecnetOne handles it: TecnetGRC
SOC 2 Type II, SOC 1, SOC report, AICPA, Trust Services Criteria
Related terms
COBIT
COBIT is ISACA's framework for the governance and management of enterprise information technology. It helps align IT with business goals, define responsibilities and controls, and measure performance, and it is widely used by auditors, boards and compliance teams.
Cybercrime
Cybercrime is any illegal activity that uses computers, networks or the internet as a tool or a target, such as unauthorized access to systems, data theft, online fraud, ransomware extortion or identity theft. In the US it is prosecuted under laws such as the Computer Fraud and Abuse Act (CFAA) and state laws.
Phishing simulation
A phishing simulation is a controlled exercise in which a company sends employees fake emails that look like real ones to measure who clicks or hands over data, and gives those who fall for it immediate training. Repeated regularly, it tracks how human risk changes over time.
Security awareness training
Security awareness training is an ongoing program that teaches employees to recognize and avoid digital risks, such as phishing emails, weak passwords or careless handling of information. It combines short courses, simulations and metrics to turn staff into a line of defense instead of the weakest link.
Vulnerability assessment
A vulnerability assessment is a systematic review of a company's devices, servers and applications to find known security flaws, such as unpatched software or weak configurations, and rank them by risk. Unlike a penetration test, it does not try to exploit the flaws: it identifies them and delivers a remediation plan.
Ready to put this into practice in your operation?
Tell us what you need and a TecnetOne engineer will get back to you.
Talk to an engineerTalk to an engineer
Tell us what you need and we’ll reply the same business day.