SOC 2el

ement
s

Syst
em
•People Userentit
ies’vendorris
kmanagementexpectat
ionsrel
atedtothe
•Processes secur
ity
,av ai
labil
it
yorpr oc
essi
ngint
egri
tyofasyst
em toprovi
de
•Applic
at i
ons ser
vices;orc onfident
ial
ityandpri
vacyofdat
a
•Infr
astructur
e

Sys
tem des cription
•Ser vi
cespr ovided Cont
rol
s
•Proc edures
•Ac counti
ngr ecords
•Significantevent s Tr
us tSer
vic
esCri
ter
ia
•Ent i
ty-l
evelc ontrols (i
ncludesri
skass
essment)
•Repor ti
ng
•Us ercontrolc onsiderat
ions Exi
sting Limited
“Reas
onablebas
is”f
ormanagementasser
ting On-goi
ng
•SSOc ontrolc onsi
derati
ons tes
ting/ addit
ional
cont
rol
swerecons
ist
ent
lyappl
ied moni
tor
ing
v
ali
dation test
ing

Servi
ceaudit
or’
s I
ndic
atessubject
Management
’s
repor
t matt
erofservic
e
wri
tt
enasser
tion
Userest
ric
ted audi
tor
’sopi
nion