ISC2 CISSP Certified Information Systems Security Professional Official Study Guide

by Mike Chapple

The SOC1 audit focuses on a description of security mechanisms to assess their suitability. The SOC2 audit focuses on implemented security controls in relation to availability, security, integrity, privacy, and confidentiality.