A SOC2 report includes

		Security (confidentiality, integrity, availability) and privacy controls
		Internal controls over financial reporting
		Security (confidentiality, integrity, availability) and privacy controls
		Baselines to use for comparison

A SOC3 report includes

Security (confidentiality, integrity, availability) and privacy controls

Security (confidentiality, integrity, availability) and privacy controls

Internal controls over financial reporting

Security incidents

ISO 27002 defines

a set of best practices for IT management

a set of concepts and policies for managing IT infrastructure, development, and operations

a response to a U.S. Presidential Executive Order calling for increased cybersecurity. It focuses on critical infrastructure components but is applicable to many general systems.

best-practices document that gives good guidelines for information security management. For an organization to claim compliance, it must perform an audit to verify that all provisions are satisfied. ISO 27002 is part of a growing suite of standards, the ISO 27000 series, that defines information security standards.

NIST CSFThe National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF) defines

a response to a U.S. Presidential Executive Order calling for increased cybersecurity. It focuses on critical infrastructure components but is applicable to many general systems

a set of concepts and policies for managing IT infrastructure, development, and operations

best-practices document that gives good guidelines for information security management

a set of best practices for IT management.

1. The Committee of Sponsoring Organizations (COSO) of the Treadway Commission is a volunteer-run organization that gives ___________________ to executive management and governance entities on critical aspects of organizational governance, business ethics, internal control, enterprise risk management, fraud, and financial reporting.

   		Guidance
   		Standards
   		Policies
   		Regulations

Monitoring against a baseline starts with sampling _______________________.

		Fraudulent behavior
		Normal behavior
		Accelerated behavior
		Criminal behavior