System and Organization Controls (SOC) is a reporting framework developed by the American Institute of Certified Public Accountants (AICPA). It evaluates and reports an organization’s controls related to security, financial reporting, privacy, integrity, and confidentiality. SOC reports help organizations to demonstrate that appropriate controls are in place to protect data, manage risks, maintain reliable systems, and meet customer and stakeholder expectations. It is particularly obtained by SaaS companies, cloud service providers, IT organizations, financial service providers, and businesses that handle customer data.