CCAK

Hello,

What is the difference between a SOC I and a SOC II report?

Thanks :)

------------------------------
Jenna Morrison
Training Department Intern
Cloud Security Alliance
------------------------------

Original Message:
Sent: 5/19/2021 4:28:00 PM
From: Jenna Morrison
Subject: SOC I vs. SOC II Reports

Hello,

What is the difference between a SOC I and a SOC II report?

Thanks :)

------------------------------
Jenna Morrison
Training Department Intern
Cloud Security Alliance
------------------------------

Thank you, this is helpful!

------------------------------
Jenna Morrison
Training Department Intern
Cloud Security Alliance
------------------------------

Original Message:
Sent: May 19, 2021 08:55:37 PM
From: Kaustubh Ponkshe
Subject: SOC I vs. SOC II Reports

Hope this is helpful 

Types	SOC 1	SOC 2	SOC 3
	Controls relevant to user financial reporting	Controls regarding 1. Security 2. Availability 3. Processing integrity 4. Confidentiality 5. Privacy. Shared under NDA	Controls regarding 1. Security 2. Availability 3. Processing integrity 4. Confidentiality 5. Privacy. Publicly available
Type 1	On the time of assessment	On the time of assessment	On the time of assessment
Type 2	Min last 6 months	Min last 6 months	Min last 6 months

Thanks & Regards

Kaustubh Ponkshe

Original Message:
Sent: 5/19/2021 4:28:00 PM
From: Jenna Morrison
Subject: SOC I vs. SOC II Reports

Hello,

What is the difference between a SOC I and a SOC II report?

Thanks :)

------------------------------
Jenna Morrison
Training Department Intern
Cloud Security Alliance
------------------------------

@Kaustubh Ponkshe , just an update to your info block, SOC 3 do not have type 1 reports, only type 2​

------------------------------
Kevin Stander
------------------------------

Original Message:
Sent: May 19, 2021 08:55:37 PM
From: Kaustubh Ponkshe
Subject: SOC I vs. SOC II Reports

Hope this is helpful 

Types	SOC 1	SOC 2	SOC 3
	Controls relevant to user financial reporting	Controls regarding 1. Security 2. Availability 3. Processing integrity 4. Confidentiality 5. Privacy. Shared under NDA	Controls regarding 1. Security 2. Availability 3. Processing integrity 4. Confidentiality 5. Privacy. Publicly available
Type 1	On the time of assessment	On the time of assessment	On the time of assessment
Type 2	Min last 6 months	Min last 6 months	Min last 6 months

Thanks & Regards

Kaustubh Ponkshe

Original Message:
Sent: 5/19/2021 4:28:00 PM
From: Jenna Morrison
Subject: SOC I vs. SOC II Reports

Hello,

What is the difference between a SOC I and a SOC II report?

Thanks :)

------------------------------
Jenna Morrison
Training Department Intern
Cloud Security Alliance
------------------------------

Original Message:
Sent: 5/27/2021 5:38:00 AM
From: Kevin Stander
Subject: RE: SOC I vs. SOC II Reports

@Kaustubh Ponkshe , just an update to your info block, SOC 3 do not have type 1 reports, only type 2​

------------------------------
Kevin Stander
------------------------------

Original Message:
Sent: May 19, 2021 08:55:37 PM
From: Kaustubh Ponkshe
Subject: SOC I vs. SOC II Reports

Hope this is helpful 

Types	SOC 1	SOC 2	SOC 3
	Controls relevant to user financial reporting	Controls regarding 1. Security 2. Availability 3. Processing integrity 4. Confidentiality 5. Privacy. Shared under NDA	Controls regarding 1. Security 2. Availability 3. Processing integrity 4. Confidentiality 5. Privacy. Publicly available
Type 1	On the time of assessment	On the time of assessment	On the time of assessment
Type 2	Min last 6 months	Min last 6 months	Min last 6 months

Thanks & Regards

Kaustubh Ponkshe

Original Message:
Sent: 5/19/2021 4:28:00 PM
From: Jenna Morrison
Subject: SOC I vs. SOC II Reports

Hello,

What is the difference between a SOC I and a SOC II report?

Thanks :)

------------------------------
Jenna Morrison
Training Department Intern
Cloud Security Alliance
------------------------------