article thumbnail

Audit Checklist for SOC 2

Reciprocity

Before 2014, cloud storage providers only had to meet SOC 1 (previously known as Statement on Standards for Attestation Engagements no. Monitoring activities. Control activities – which are further broken out by: Logical and physical access. Risk management processes and internal corporate governance.

Audit 52