Question: When applying the carve-out method to a SOC engagement for which a subservice organization is used, service organization management should: A. Exclude any reference to
When applying the carve-out method to a SOC engagement for which a subservice organization is used, service organization management should: A. Exclude any reference to the subservice organization or the impact that complementary subservice organization controls may have on control objectives of the service organization from the description of the service organization's system. B. Include reference to the complementary subservice organization controls in the description of the service organiz
Step by Step Solution
There are 3 Steps involved in it
1 Expert Approved Answer
Step: 1 Unlock
Question Has Been Solved by an Expert!
Get step-by-step solutions from verified subject matter experts
Step: 2 Unlock
Step: 3 Unlock
