Atlas Systems Named a Representative Vendor in 2025 Gartner® Market Guide for TPRM Technology Solutions → Read More
.png?width=869&height=597&name=image%20(5).png)
.png?width=300&height=175&name=Rectangle%2034624433%20(2).png)
A
B
C
D
E
F
G
H
I
J
K
L
M
N
O
P
Q
R
S
T
U
V
W
X
Y
Z
Glossary › SOC 1 / SOC 2 / SOC 3
What is SOC 1 / SOC 2 / SOC 3?
SOC reports, issued under the AICPA framework, assess vendor control environments. SOC 1 focuses on financial reporting controls, SOC 2 on security and privacy principles, and SOC 3 on general-use summaries. In TPRM, SOC reports are core evidence tools for validating vendor control maturity.
FAQs
Why request SOC reports?
They provide independent assurance of controls.
How often are reports issued?
Annually.
Do SOC reports replace assessments?
No, they supplement them.
Reinventing TPRM with
ComplyScore®
Learn how leading risk teams reduce cyber risk and protect compliance faster.