Addresses internal controls that are relevant to a company’s internal control environment over the following five Trust Services Criteria (TSC):
- Security
- Availability
- Processing Integrity
- Confidentiality
- Privacy
By definition, a SOC 2 is designed to review a vendor’s control environment in relation to the selected TSCs based on the vendor’s defined scope.