SOC 2 definition

SOC 2 means the AICPA System and Organizational Controls for Service Organizations – SOC 2: Reporting on an Examination of Controls at a Service Organization Relevant to Security, Availability, Processing Integrity, Confidentiality, or Privacy audit, as amended or superseded or replaced from time to time, or other modified or replacement or successor report.

SOC 2 means service organization control 2.

SOC 2 has the meaning set forth in Section 8.7(a).

Examples of SOC 2 in a sentence

• A SOC 2 Type 2 Report is not a Contractor requirement for this Contract.

• The University will utilize all invoicing and documentation, which relates to Kent State University’s final cost, and internal controls documentation required under the contract including, but not limited to any applicable audit or security assessment reports or certifications such as: SAS 70 or its replacement SSAE 16, SOC 2, or ISO 27001, and copies of any applicable corporate information security policies or other supporting documentation.

• The type of audit to be performed in accordance with the Guidance is a SOC 2 Type 2 Audit (referred to as the “SOC 2 Audit” or “SOC 2 Report”).

• Include a copy of any applicable audit or security assessment reports or certifications such as: SSAE 16, SOC 2, or ISO 27001 and include copies of any applicable corporate information security policies or other supporting documentation that will substantiate the questionnaire responses.

• Each checkmark in Column (d) requires specific explanation in Section E.

• Any Software as a Service (SaaS), Infrastructure as a Service (IaaS), or Platform as a Service (PaaS) used to meet the requirements of this solicitation shall be AICPA Service Organization Control (SOC) 2 compliant, or equivalent (e.g., ISO 27001/2 Certification, Verified PCI DSS, FedRAMP).

• A SOC 2 Type II Report is not a Contractor requirement for this Contract.

• The initial SOC 2 Audit shall be completed within a timeframe to be specified by the State.

• We have attained, and will maintain, SOC 1 and SOC 2 compliance, or its equivalent, for so long as you are timely paying for SaaS Services.

• The audit period covered by the initial SOC 2 Audit shall start with the Contract Effective Date unless otherwise agreed to in writing by the Contract Monitor.

More Definitions of SOC 2

SOC 2 means the reporting of non-financial business controls as they relate to security, availability, processing integrity, confidentiality, and privacy of a system.

SOC 2 means defined criteria for managing customer data based on five “trust service principles”—security, availability, processing integrity, confidentiality and privacy “SOC3” is a simplified version of SOC2 report;

SOC 2 means the SOC for Service Organizations: Trust Services Criteria issued and maintained by the American Institute of Certified Public Accountants.

SOC 2 means Service Organisation Controls 2. The SOC 2 reporting standard is an Audit opinion report over internal controls related to Information Technology. It is based around the Trust Principles of Security, Availability, Integrity of processing, Confidentiality and Privacy;