Glossary · Security, trust and compliance
SOC 2 Type II
An independent attestation that a service organization’s controls operated effectively over a period, against the AICPA (opens in a new tab) trust services criteria.
In REAP
REAP’s attestation is in process; the report is available upon request, under NDA, and the status, scope and timeline are in the security packet. Never described as achieved until it is.
Related terms
More in security, trust and compliance
- Audit scope
- CSA STAR, CAIQ and SIG
- CVE (Common Vulnerabilities and Exposures)
- Data processing agreement (DPA)
- Encryption in transit and at rest
- GDPR, UK GDPR and CCPA/CPRA
- HIPAA and PHI
- IAM (identity and access management)
- ISO/IEC 27001 and 42001
- Key management service (KMS)
- Lateral movement
- Multi-factor authentication (MFA)
- NERC CIP
- NIST Cybersecurity Framework (CSF)
- OWASP and ASVS
- PCI DSS
- Penetration test
- SAML and OIDC (single sign-on protocols)
- Secure software development (SSDF) and SBOM
- Security packet
- security.txt
- Server-side request forgery (SSRF)
- SOC 2 Type I and Type II
- Subprocessor
- Trust Center
- Vulnerability disclosure
Bring us your last P1.
Keep the root cause to yourself; in a 30-minute session we walk through how REAP would have investigated it, evidence first. The replay on your own network happens inside the proof of value.