Service Organisation Control 1 — controls relevant to user entities' financial reporting.
Service Organisation Control 1 — controls relevant to user entities' financial reporting. This framework is part of tier 3 - audit & financial, designed for audit firms and large enterprises.
Authoritative current reference
SOC 1® examination under AT-C section 320 / SSAE No. 18, with AICPA SOC 1 Guide (2025)
Authority: AICPA & CIMA
SOC 1 Type II readiness should map to controls relevant to user entities' internal control over financial reporting and a period-of-time Type II examination under AT-C section 320. The 2025 AICPA SOC 1 Guide is current practitioner guidance.
Approximately 120 minutes to complete the full assessment
Complete comprehensive assessments with smart questioning that adapts to your responses.
Identify compliance gaps with severity ratings and prioritised remediation recommendations.
Securely store and organise compliance documentation with automated expiry tracking.
Access to TASK consultants for guidance, reviews, and remediation planning.
Generate professional PDF reports for stakeholders, auditors, and regulators.
Need enterprise deployment? Contact us
International Standard on Auditing — IT General Controls assessment for audit firms.
Public Company Accounting Oversight Board IT control requirements for auditors.
Sarbanes-Oxley Act IT General Controls — internal controls over financial reporting.