SOC for Supply Chain examination
163475·updated Aug 30, 2026An examination engagement to report on whether ( a ) the description of the entity's system is presented in accordance with the description criteria and ( b ) the controls stated in the description, which are necessary to provide reasonable assurance that the entity achieved its principal system objectives, were effective based on the applicable trust services criteria. Such an examination is based on guidance contained in AICPA Guide Reporting on an Examination of Controls Relevant to Security, Availability, Processing Integrity, Confidentiality, or Privacy in a Production, Manufacturing, or Distribution System (SOC for Supply Chain guide).
Source
Proposed during multiword review of this document in the CKI mapping queue.
Attested in
No recorded attestations. They are written when an MWE tagging stage is completed, stamped with the pack version and the document’s digest.
Classifications
Entity Type
Sensitivity
Information Class
Variants
Framework definitions
- §1 · glossary
- An examination engagement to report on whether ( a ) the description of the entity's system is presented in accordance with the description criteria and ( b ) the controls stated in the description, which are necessary to provide reasonable assurance that the entity achieved its principal system objectives, were effective based on the applicable trust services criteria. Such an examination is based on guidance contained in AICPA Guide Reporting on an Examination of Controls Relevant to Security, Availability, Processing Integrity, Confidentiality, or Privacy in a Production, Manufacturing, or Distribution System (SOC for Supply Chain guide).Attribution from the CKI glossary mapping stage (glossary)
- §1 · legacy_primary
- An examination engagement to report on whether ( a ) the description of the entity's system is presented in accordance with the description criteria and ( b ) the controls stated in the description, which are necessary to provide reasonable assurance that the entity achieved its principal system objectives, were effective based on the applicable trust services criteria. Such an examination is based on guidance contained in AICPA Guide Reporting on an Examination of Controls Relevant to Security, Availability, Processing Integrity, Confidentiality, or Privacy in a Production, Manufacturing, or Distribution System (SOC for Supply Chain guide).DR-088 backfill from the noun definition column