Service Organization Control

Information technology - standards.

(SOC).

A Service Organization Controls refer to internal controls that are likely to be relevant to an audit of financial statements.

1 or Soc 1 (pronounced "sock one") report is written documentation of the internal controls that are likely to be relevant to an audit of a customer’s financial statements.

Soc 1 is divided into Type 1 and Type 2 reports. A Type 1 reports on a service organization’s suitability of design of controls on a specific date, while a Type 2 reports on the effectiveness of the control design over a period of time. Soc 1 reports are performed by a service auditor

See also

• Information security management system
• ISO 27001
• Risk management
• Security
• SOC 1 report