Over 18 years of experience in a wide variety of technical domains within information security including information assurance, compliance, and risk management.
Trust principles, report structure, and management responses
In this story, we will take a glance at the five trust principles, reporting structure, management responses, and how security analysts can use this report to evaluate a vendor’s security posture.
Five Trust Principles
Security: The system is protected against unauthorized access, both physical and logical.
Availability: The system is available for operation and use as agreed upon or as required.
Processing integrity: System processing is complete, accurate, timely, and authorized.
Confidentiality: Information designated as confidential is protected as agreed upon or as required.
Privacy: Personal information is collected, used, retained, disclosed, and disposed of in accordance with the privacy notice issued to the user.
Press enter or click to view image in full size
Reporting Structure
The SOC 2 report structure typically includes the following components:
Independent Service Auditor’s Report: The report includes a statement about the…
Over 18 years of experience in a wide variety of technical domains within information security including information assurance, compliance, and risk management.
