A service auditor’s SOC 1 report on internal control may be…
A service auditor’s SOC 1 report on internal control may be issued on management’s description of a service organization system and the suitability of the design of controls or management’s description of a service organization system and the suitability and operating effectiveness of controls. Which of the following is true about a SOC 1, type 1 report?