Under active development Content is continuously updated and improved
Home / Frameworks / SOC 2

SOC 2 v2017

Trust Services Criteria for Security, Availability, Processing Integrity, Confidentiality, and Privacy

The Trust Services Criteria and COSO Principles are proprietary to AICPA. This tool provides independently-written summaries for educational reference only and is not affiliated with or endorsed by AICPA. For official criteria text, audit guidance, and SOC 2 reports, visit the AICPA website. Do not rely on this tool for compliance decisions.

62 All

A1 Additional Criteria for Availability (3 criteria)

C1 Additional Criteria for Confidentiality (2 criteria)

CC8 Change Management (1 criteria)

P1 Privacy - Notice and Communication (2 criteria)

P2 Privacy - Choice and Consent (1 criteria)

P7 Privacy - Quality (1 criteria)

P8 Privacy - Monitoring and Enforcement (1 criteria)