CPA · Question 78 · Area III: SOC Engagements
In a SOC 2® engagement, if the service organization uses the 'Inclusive Method' for a subservice organization, what is the auditor's responsibility?
Answer options:
To rely solely on the subservice organization's SOC report.
To exclude the subservice organization from the scope.
To test the controls at the subservice organization as if they were the service organization's own controls.
To issue a separate report for the subservice organization.
82 questions · hints · full answers · grading
Expert