Exam CCSP topic 1 question 322 discussion

SOC 3 reports are designed for general public distribution and provide high-level trust assurances about a cloud provider’s security, availability, processing integrity, confidentiality, and privacy controls. They are derived from SOC 2 reports but exclude sensitive details, making them suitable for public trust and marketing purposes. Why Not the Others? A. SOC 2 → Contains detailed security and operational controls but is restricted to internal use (customers, partners, or auditors). B. SAS-70 → Obsolete; replaced by SSAE-16, which evolved into SOC 1, SOC 2, and SOC 3. D. SOC 1 → Focuses on financial controls and is not intended for general security or public trust assurances.

C. SOC 3