GRC

SOC 2

An auditor's report on how well a service organization's controls meet the AICPA's Trust Services Criteria — security, availability, confidentiality, and similar.

Related terms

GRC Vendor security questionnaire Standard questions used to assess a vendor's security before signing. GRC Information security management system An ongoing program for managing information security, built on ISO/IEC 27001.
← Back to Governance, risk & compliance