AICPA SOC 3
Suitability and use of a general-use report – AICPA SOC 3

AICPA SOC 3 U-4: Keep the report general-use: no description, no tests and results

A SOC 3 contains no system description (so detailed controls are not disclosed) and no description of the auditor's tests and results; adding such detail raises the chance of misunderstanding and could lead the auditor to restrict use, so a report containing it is unlikely to suit general use (Guide 1.75 and note 24, AT-C 205 .A85).

Maintained by Gerard BlokdykControl text last updated

Other controls in Suitability and use of a general-use report – AICPA SOC 3

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll AICPA SOC 3 controls