Verified75% confidenceFactExact time
SOC 2 is a security audit standard for service-type enterprises developed by the American Institute of Certified Public Accountants, and is divided into two types: Type I and Type II.
3
Sources
75%
Confidence
Long-term
Relevance
7/7/2026
First Seen
Sources
AI工作区会话与缓存泄露：多租户隔离安全风险全解析
hackernewshackernews7/4/2026
Related Claims
UnverifiedSOC 2 reports are divided into Type I (control design at a point in time) and Type II (control operating effectiveness over a period), and are essentially a sampling assessment of control status within the audit window, not a continuous guarantee of a vendor's real-time security posture.79% similarUnverifiedThe SOC 2 compliance standard lists audit trails as a key control item under two trust service criteria: security and processing integrity.74% similarUnverifiedSOC 2 is developed by the American Institute of Certified Public Accountants (AICPA), and Type II requires sample-based auditing of the actual operation of controls over an observation period of 6–12 months, reflecting sustained compliance capability better than Type I.71% similarUnverifiedSOC 2 Type 2 certification requires an auditing firm to spot-check the actual operational effectiveness of a company's security controls over a period of time (typically 6–12 months), rather than merely reviewing written policies.66% similarUnverifiedComplete audit logs are one of the core pieces of evidence for passing a SOC 2 audit.63% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/155333API
curl https://kongchang.com/api/v1/knowledge/claims/155333MCP
get_claim(id=155333)