Audit & Assurance

Trust Services Criteria (TSC)

AICPA criteria used to evaluate the design and operating effectiveness of a service organisation's controls for a SOC 2 report.

The five TSC are Security (mandatory), Availability, Processing Integrity, Confidentiality and Privacy. Each criterion maps to Common Criteria (CC) and supplemental criteria.