Question

Which of the following reports, which generally are shared only between the organizations that are doing business with one another, are used by auditors to assess the ICFR at one entity that does business with another entity

A. SOC-1
B. SOC-2
C. SOC-3

Answer 1

A. SOC-1.

Step-by-step explanation:

SOC-1 is an acronym for System and Organization Controls Report, which generally are report shared only between the organizations that are doing business with one another. It is also used by auditors to assess, test and report the Internal Control over Financial Reporting (ICFR) at one entity that does business with another entity.

The SOC-1 report is also known as Statement on Standards for Attestation Engagements (SSAE) 18, it helps to create trust and transparency among business entities.

However, it was formerly referred to as the Statement on Auditing Standards 70 (SAS 70) and usually is valid for a period of 1 year (12 months).