A hosting provider needs to prove that its security controls have been in place over the last six months and have sufficiently protected customer data. Which of the following would provide the best…

The correct answer is B. SOC 2 Type 2 report. This report provides an audit of the service organization controls over a specified period of time like six months or more and assess how well those controls protect customers data according to predefined criteria.

Submitted by wei.xz· Mar 6, 2026Security program management and oversight

Question

A hosting provider needs to prove that its security controls have been in place over the last six months and have sufficiently protected customer data. Which of the following would provide the best proof that the hosting provider has met the requirements?

Options

ANIST CSF
BSOC 2 Type 2 report
CCIS Top 20 compliance reports
DVulnerability report

How the community answered

(52 responses)

A
13% (7)
B
77% (40)
C
4% (2)
D
6% (3)

Explanation

This report provides an audit of the service organization controls over a specified period of time like six months or more and assess how well those controls protect customers data according to predefined criteria.

Community Discussion

No community discussion yet for this question.

Full SY0-701 Practice