SSAE 16 includes three broad types of SOC Reports.SOC 1 reports on:
A)ERP systems.
B)the COSO framework.
C)controls over security, availability, processing integrity, confidentiality or privacy.
D)controls relevant to user entities internal control over financial reporting.

Question

Quizplus · Accepted Answer

SOC 1 reports are specifically designed to evaluate and report on controls relevant to user entities' internal control over financial reporting. This report is commonly used for financial audits, including those related to compliance with the Sarbanes-Oxley Act (SOX). SOC 1 reports are not designed to provide assurance on security, availability, processing integrity, confidentiality, or privacy controls.

SSAE 16 Includes Three Broad Types of SOC Reports