SOC 2
Technology & Computing abbreviation · Cybersecurity
| Stands for | System and Organization Controls 2 |
|---|---|
| Categories | Technology & Computing |
SOC 2 stands for System and Organization Controls 2, a cybersecurity abbreviation.
An AICPA attestation report in which an independent auditor evaluates a service provider's controls against the Trust Services Criteria: security, plus optionally availability, processing integrity, confidentiality and privacy. It has become the standard security assurance requested of SaaS vendors in North America.
Example: Enterprise customers won't sign until we share our SOC 2 Type II report.
Usage notes
A Type I report assesses control design at one point in time, while a Type II report tests whether controls worked over a period, usually 3 to 12 months. Reports are confidential and shared under NDA. Compliance automation platforms such as Vanta and Drata grew by helping startups prepare. Outside North America, ISO 27001 certification often fills the same role.
Related abbreviations
More cybersecurity abbreviations
- SCA – Software composition analysis
- SHA – Secure Hash Algorithm
- SHA-256 – Secure Hash Algorithm 256-bit
- SIEM – Security information and event management
- SOAR – Security orchestration, automation and response
- SOC – Security operations center
- SPF – Sender Policy Framework
- SQLi – SQL injection
- SSL – Secure Sockets Layer
- SSO – Single sign-on
- SSRF – Server-side request forgery
- TLS – Transport Layer Security