(ISC)2
CCSP · Question #830
Which kind of SSAE audit report is a cloud customer most likely to receive from a cloud provider?
The correct answer is C. SOC 3. The SOC 3 is the least detailed, so the provider is not concerned about revealing it. The SOC 1 Types 1 and 2 are about financial reporting, and not relevant. The SOC 2 Type 2 is much more detailed and will most likely be kept closely held by the provider.
Submitted by noor.lb· Apr 18, 2026Legal, Risk and Compliance
Question
Which kind of SSAE audit report is a cloud customer most likely to receive from a cloud provider?
Options
- ASOC 1 Type 1
- BSOC 2 Type 2
- CSOC 3
- DSOC 1 Type 2
How the community answered
(37 responses)- A3% (1)
- B3% (1)
- C86% (32)
- D8% (3)
Explanation
The SOC 3 is the least detailed, so the provider is not concerned about revealing it. The SOC 1 Types 1 and 2 are about financial reporting, and not relevant. The SOC 2 Type 2 is much more detailed and will most likely be kept closely held by the provider.
Topics
#SOC reports#Cloud compliance#Audit reports#Vendor assessment
Community Discussion
No community discussion yet for this question.