An auditor wants to get information about the operating effectiveness of controls addressing privacy, availability, and confidentiality of a service organization. Which of the following can BEST help to gain the required information?
To obtain information about the operating effectiveness of controls addressing privacy, availability, and confidentiality of a service organization, the auditor would benefit most from a:
A. SOC 2 Type 2 report
A SOC 2 Type 2 report specifically focuses on the Trust Services Criteria, which include security, availability, processing integrity, confidentiality, and privacy. It evaluates not only the design of the controls but also their operating effectiveness over a period of time, making it the best choice for assessing these aspects.
upvoted 1 times
...
This section is not available anymore. Please use the main Exam Page.CCAK Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Auditor2020
3 months, 1 week ago