AICPA SOC 3 U-3: Consider restricting use where CUECs are needed

Readers without a system description may not understand why controls at user entities are required for the organisation's commitments to be met, so where CUECs are necessary the service auditor may restrict the report to users likely to understand them, such as customers who receive detailed communications about their responsibilities (Guide 2.194).