Exam CISSP topic 1 question 24 discussion

B (SOC 1) is the correct answer. Misread the question earlier.

Financial... internal... SOC1 !

System and Organization Controls 1, or SOC 1 (pronounced "sock one"), aims to control objectives within a SOC 1 process area and documents internal controls relevant to an audit of a user entity's financial statements. https://www.techtarget.com/searchsecurity/definition/SOC-1-System-and-Organization-Controls-1?Offer=abMeterCharCount_var2

No other choose only B is Financial.

No other choose only B is Financial.

B is correct - The SOC1 audit focuses on a description of security mechanisms to assess their suitability.

B is the answer. https://us.aicpa.org/interestareas/frc/assuranceadvisoryservices/aicpasoc1report SOC 1 - SOC for Service Organizations: ICFR Report on Controls at a Service Organization Relevant to User Entities’ Internal Control over Financial Reporting (ICFR)

Financial, so B.

B is correct answer. SOC Type 1

SOC 1 Used to address internal controls that relate to a vendor’s financial reporting. It essentially looks at the quality of the vendor’s bookkeeping by disclosing its financial and accounting controls. 1. Report evaluates controls within a single point in time (a single date) and often doesn’t test controls. 2. Report is considered the ideal option because it tests control effectiveness over a period of time, thereby giving you better insight into patterns or recurring issues.

I am going with "B" on this one. SOC 1 report. Evaluates how your services impact your customers’ financial reporting control environment SOC 1 matters for both financial transactions and the things that can impact financial transactions SOC 2 report is more operational and broadly related to security and governance matters. Not only does it describe how your services remain secure and how you protect the data entrusted to you, but it also notes how well your organization keeps its commitments to the same. https://www.schellman.com/blog/2016/01/what-are-service-organization-controls-soc-reports/

SOC 1 focuses on financial reporting, whereas SOC 2 focuses on compliance and operations.