MENU
Unlike SOC Type 1 reports, which are based on a specific point in time, SOC Type 2 reports are done over a period of time. What is the minimum span of time for a SOC Type 2 report?
Suggested Answer: A
Get Premium CCSP Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
SOC Type 2 reports are focused on the same policies and procedures, as well as their effectiveness, as SOC Type 1 reports, but are evaluated over a period of at least six consecutive months, rather than a finite point in time.
4 comments · newest first
LI
Lindy
6 hours ago
I thought it was six months too, but I also recall something about a shorter duration being acceptable.
CO
Corrina
5 days ago
I feel like it might be one year, but I could be mixing it up with something else.
AU
Audry
11 days ago
I remember practicing a question like this, and I think it was one month, but that seems too short for a Type 2.
FR
Francesco
16 days ago
I think the minimum span for a SOC Type 2 report is six months, but I'm not completely sure.