Outline for Guide: Reporting on Controls at a Service Provider

When assessing controls at a service organization that may be relevant to and affect the services provided to User Entities, management of a User Entity may ask the service organization for a SOC 2 report on the design and operating effectiveness of controls over the service organization’s system that may be relevant to the security ... ................
................