Companies are increasingly outsourcing basic functions such\nas data storage and access to applications to cloud service providers (CSPs)\nand other service organizations. In response to this fact, the American\nInstitute of Certified Public Accountants (AICPA) has developed the Service\nOrganization Controls (SOC) framework, a standard for controls that safeguard\nthe privacy and confidentiality of information that is store and process in the\ncloud. This framework conforms to the International Standard on Assurance\nEngagements (ISAE), the reporting standard for international service\norganizations.<\/p>\n\n\n\n
An SOC 1 audit, aimed at Certified Public Accounting (CPA)\ncompanies that audit financial statements, evaluates the effectiveness of the\ninternal controls of a CSP that affect the financial reports of a customer\nusing the provider’s cloud services. Statement on Standards for Attestation\nEngagements (SSAE 18) and International Standards for Assurance Engagements No.\n3402 (ISAE 3402) are the standards under which the audit is conducted and are\nthe basis on which the SOC 1 report is performed.<\/p>\n\n\n\n