AICPA SOC 3
Management responsibilities and assertion – AICPA SOC 3

AICPA SOC 3 M-1: Define what the SOC 3 examination covers

Management, as the engaging party, settles what the examination covers: the system, the trust services categories included and the period, in the same way as for a SOC 2 engagement (Guide 2.191, with 2.05).

Maintained by Gerard BlokdykControl text last updated

Other controls in Management responsibilities and assertion – AICPA SOC 3

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll AICPA SOC 3 controls