article thumbnail

Audit Checklist for SOC 2

Reciprocity

Risk assessment. Risk mitigation. The AICPA created SOC 2 to establish an audit standard that addresses the ongoing trends of cloud computing and software as a service. Monitoring activities. Control activities – which are further broken out by: Logical and physical access. System operational effectiveness.

Audit 52