Related to SOC reporting, an auditor will determine if the vendor’s system description is “fairly presented” and whether it accurately represents the system that was designed and implemented as of a specified date (Type I report) or over a specified period of time (Type II report).