TBC Information Network

Teal, Becker & Chiaramonte offering valuable insights, impressions and commentary on today's financial and business world.


Service Organizations may need a general-use report (or seal) instead of or in addition to a SOC 2 report.  In addition, a service organization may not wish to provide details of controls in its system description or a description that meets the criteria as required in the SOC 2 guidelines.  In these situations, the service organization may find a SOC 3 report on one or more of the five Trust Services principles better meets its needs.  Because SOC 3 reports are for general use, they can be freely distributed or posted on the service organization’s website via a publicly visible SOC seal with a link to the report.