A
AcadiFi
TA
toronto_acct2026-05-21
cpaISCAttestation ReportsSOC

What is the difference between SOC Type 1 and Type 2 reports?

When I see "as of a date" versus "over a period" in questions, I am not sure which type is being tested.

51 upvotes
Verified ExpertVerified Expert
AcadiFi Certified Professional

Type 1 is about design at a specified date. It addresses whether the system description is fairly presented and whether controls are suitably designed as of that date.

Type 2 covers a period and includes operating effectiveness. If the question asks whether controls actually operated throughout several months, Type 2 is the stronger answer. If it only asks about control design as of a date, Type 1 may fit.

📋

Master ISC with our CPA Course

86 lessons · 160+ hours· Expert instruction

#type 1#type 2#operating effectiveness#control design