Certified Cloud Security Professional (CCSP) — Question 474

Which of the following report is most aligned with financial control audits?

Answer options

• A. SSAE 16
• B. SOC 2
• C. SOC 1
• D. SOC 3

Correct answer: C

Explanation

The correct answer is SOC 1, as it specifically focuses on internal controls over financial reporting, making it the most suitable for financial control audits. SSAE 16 is related to service organizations but does not specifically target financial controls, while SOC 2 and SOC 3 deal with trust services criteria, which are broader and not solely financial in nature.