Which report is the vendor providing you?

Your company is purchasing an application from a vendor. They do not allow you to perform an on-site audit on their information system. However, they say, they will provide the third-party audit attestation on the adequate control design within their environment.

Which report is the vendor providing you?
A . SOC 3
B . SOC 2, TYPE 2
C . SOC 1
D . SOC 2, TYPE 1

View Answer

Answer: B