What is the Service Organization Control (SOC) 2 Report?

Service Organization Control (SOC) reports were introduced in 2011 as a way of auditing providers on security and availability of their services. The SOC 2 report evaluates an organization’s information systems relevant to security, availability, processing integrity, confidentiality, or privacy to prevent unauthorized access of sensitive information. If the auditor issues a clean SOC 2 report, the data provider may be trusted as a secure hosting company. Overall, this ensures that the client and their assets are as protected as possible.

Criteria in the Service Organization Control (SOC) 2 Report

SOC 2 reports are vital to maintaining the security of financial transactions and other highly-sensitive data transmissions. ATI combines the best practices and compliance with industry standards in our SOC 2 hosting. This allows clients and customers to enjoy secure access to protected information.

The five principles of a SOC 2 report include:

• Security. Systems and information must have physical and logical protection against unauthorized access and unauthorized disclosure of information. Security should address any potential damage to systems that could compromise the integrity, confidentiality, and privacy of information or systems.
• Availability. Systems and information must be operationally available for use as committed or agreed upon between the client and the provider.
• Processing integrity. Processing must be valid, complete, accurate, timely, and authorized to meet the client’s objectives.
• Confidentiality. Information designated as confidential must be adequately classified and protected as agreed upon between the client and the provider.
• Privacy. Personal information must be collected, used, retained, transferred, disclosed, and disposed of as agreed upon between the client and the provider.

ATI Solutions is happy to consult with business owners about the services offered in our data centers. Contact us today to get more information about the storage and service options in our D.C. data centers, or set up an appointment to tour our Chantilly facility.