{"id":66303,"date":"2023-03-21T09:54:47","date_gmt":"2023-03-21T13:54:47","guid":{"rendered":"https:\/\/jumpcloud.com\/?p=66303"},"modified":"2023-08-30T09:22:16","modified_gmt":"2023-08-30T13:22:16","slug":"soc-1-vs-soc-2","status":"publish","type":"post","link":"https:\/\/jumpcloud.com\/blog\/soc-1-vs-soc-2","title":{"rendered":"SOC 1 vs SOC 2 Audits: What&#8217;s the Difference?"},"content":{"rendered":"\n<p>Accounting disasters and cyberattacks don\u2019t feel real until we experience them. But as more and more companies make headlines for defective security measures or questionable business practices, people are paying more and more attention to the operations behind them.<\/p>\n\n\n\n<p>System and Organization Controls (SOC) reports assure customers and stakeholders that companies are adequately prepared to counter and address financial and data-related issues. To obtain these reports, companies undergo rigorous evaluations by trained accountants and cybersecurity auditors who give their stamp of approval.<\/p>\n\n\n\n<p>But what exactly are SOC reports, and what do they mean?<\/p>\n\n\n\n<p>In this article, we define SOC 1 and 2, reveal situations where companies may need both reports, and offer tips for preparing your organization for an audit.<\/p>\n\n\n\n<figure class=\"image is-16by9\">\n<iframe class=\"has-ratio\" width=\"300\" height=\"315\" src=\"https:\/\/www.youtube.com\/embed\/_HLKvUhzW_4?rel=0\" frameborder=\"0\" allow=\"accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture\" allowfullscreen=\"\"><\/iframe>\n<\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">What Is a SOC Report?<\/h2>\n\n\n\n<p>SOC reports verify a company\u2019s commitment to and execution of accounting and data controls via audits conducted by third-party auditors. SOC reports were established by the American Institute of Certified Public Accountants, so auditors are Certified Public Accountants who typically have specialized knowledge in information security.<\/p>\n\n\n\n<p>You can think of SOC reports as a kind of company \u201cbackground check,\u201d confirming that the company\u2019s business practices around finances and data are sound. So just like when you accept an offer and HR orders a background check, organizations request copies of a company\u2019s SOC report before doing business.<\/p>\n\n\n\n<p>Overall, SOC reports increase a company\u2019s long-term sustainability and credibility, which are key to growing their business.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">SOC 1 Audits Explained<\/h2>\n\n\n\n<p>SOC 1 audits are conducted when a service organization needs to demonstrate its command over financial reporting. Examples of service organizations are companies that manage companies\u2019 payroll or healthcare benefit processing, insurance trust departments, or custodians for investment companies.<\/p>\n\n\n\n<p>During a SOC 1 audit, CPAs will review a company\u2019s entire set of internal financial controls in relation to the type of services they provide and the regulations in that industry. While this process can be onerous and tedious, it\u2019s worth it in the long run. Being able to show clients a successful SOC 1 audit and corresponding reports means that a company has the proper controls in place to deliver accurate, high-quality financial reports.<\/p>\n\n\n\n<p>As we\u2019ll discuss in a later section, the two types of SOC 1 reports indicate the suitability of a company\u2019s controls at a point in time and over a certain span of time. Usually, companies interested in an organization\u2019s services will want to see proof of both SOC 1 Type 1 and SOC 1 Type 2 reports.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">SOC 2 Audits Explained<\/h2>\n\n\n\n<p>SOC 2 audits are conducted when an organization needs to demonstrate its command over internal data operations and compliance. SOC 2 audits are more complex than SOC 1 audits and are necessary for any company that accesses, stores, or uses another company\u2019s data (even non-financial data). As you can imagine, SOC 2 is a must-have for most cloud-based software systems.<\/p>\n\n\n\n<p>SOC 2 audits assess controls <a href=\"https:\/\/jumpcloud.com\/blog\/understanding-and-preparing-for-a-soc-2-audit\">based on five Trust Service Categories<\/a>:<\/p>\n\n\n\n<ul>\n<li>Security (required)<\/li>\n\n\n\n<li>Availability (optional)<\/li>\n\n\n\n<li>Processing integrity (optional and uncommon)<\/li>\n\n\n\n<li>Confidentiality (optional)<\/li>\n\n\n\n<li>Privacy (optional and uncommon)<\/li>\n<\/ul>\n\n\n\n<p>Each category has globally accepted best practices that auditors look for, such as <a href=\"https:\/\/jumpcloud.com\/blog\/what-is-multi-factor-authentication-and-why-should-you-use-it\">user authentication<\/a>, network protection, compliance with privacy laws, <a href=\"https:\/\/jumpcloud.com\/blog\/fde-compliance\">full-disk encryption<\/a>, and adherence to a <a href=\"https:\/\/jumpcloud.com\/solutions\/zero-trust\" target=\"_blank\" rel=\"noreferrer noopener\">Zero Trust model<\/a>. Many of these categories have become even more important as a result of many more <a href=\"https:\/\/jumpcloud.com\/blog\/staying-soc-2-compliant-remote-workers\">people working remotely<\/a>.<\/p>\n\n\n\n<p>So before undergoing an audit, <a href=\"https:\/\/jumpcloud.com\/blog\/soc-2-admin-and-control-owner-responsibilities-and-tips-for-passing-an-audit\">upper management must review the current status<\/a> of each of these categories in their organization and determine which one(s) they\u2019d like auditors to review and include in their reports. Security is required, but the other four categories are optional.<\/p>\n\n\n\n<p>SOC 2 reports are considered \u201crestricted use,\u201d meaning they are only distributed if a potential customer, existing customer, or business partner requests them. In general, SOC 2 reports reflect an organization\u2019s devotion to their customers\u2019 data integrity, confidentiality, privacy, and safety.<\/p>\n\n\n\n\n<div class=\"promotion-banner-small is-flex-direction-column has-items-aligned-flex-start has-items-aligned-center-tablet\">\n    <div class=\"promo-small-image is-hidden-mobile\">\n        <img decoding=\"async\" src=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/02\/image-1-1-aspect-ratio-160-110-1.png\" alt=\"JumpCloud\">\n    <\/div>\n    <div class=\"promo-small-content\">\n        <p class=\"is-type-body-tiny is-type-weight-bold is-important promo-small-title\">\n            The IT Manager\u2019s Guide to Data Compliance Hygiene        <\/p>\n        <p class=\"is-type-body-default is-important\">\n            How to ace your audit        <\/p>\n    <\/div>\n    <div class=\"promo-small-cta\">\n        <a href=\"https:\/\/jumpcloud.com\/resources\/data-compliance-guide\" data-promo=\"Data Compliance Hygiene\" class=\"button is-primary-green promo-small-banner-link\">Get the Guide <\/a>\n    <\/div>\n<\/div>\n\n\n\n\n<h2 class=\"wp-block-heading\">SOC Type 1 Vs SOC Type 2<\/h2>\n\n\n\n<p>There are two types of sub-reports within SOC 1 and SOC 2. Let\u2019s take a moment to explain the differences between them.<\/p>\n\n\n\n<p>Within SOC 1, the Type 1 report evaluates a company\u2019s controls at the time of an audit. SOC 1 Type 2 takes this one step further and tests out the controls with real data in real time. Because some companies have hundreds of controls, securing a SOC 1 Type 2 report can take up to 6 months.<\/p>\n\n\n\n<p>Just as with SOC 1, SOC 2 has Type 1 and Type 2 reports. Similarly, SOC 2 Type 1 reports on the design, comprehensiveness, and clarity of a company\u2019s data controls at a single point in time. And as with SOC 1 Type 2 reports, SOC 2 Type 2 reports measure how well those controls work in practice by monitoring a company\u2019s operations over a 6-month period.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Could You Need a SOC 1 and SOC 2 Report?<\/h2>\n\n\n\n<p>The quick answer to this question is yes. Some companies may only need a SOC 1, others may only need a SOC 2, and others may require both.<\/p>\n\n\n\n<p>Companies hired by other organizations to complete an aspect of their financial reporting should focus on achieving SOC 1. Most organizations that hire a professional services company will ask for a SOC 1 report, so it\u2019s important to have it handy. SOC 1 is also considered an unspoken prerequisite for businesses looking to IPO.<\/p>\n\n\n\n<p>Software companies, specifically SaaS companies, are often good candidates for SOC 2 reports. Even though they may not be accessing, storing, or using customers\u2019 financial data, they typically interact with company and personal data. So it\u2019s no surprise that customers want to know that their data is as protected from breaches and cyberattacks as possible. SOC 2 reports reassure customers that auditors have examined the internal strategies and procedures you\u2019ve implemented to safeguard data.<\/p>\n\n\n\n<p>Sometimes, companies are both financial service providers and software companies\u4e00take accounting software <a href=\"https:\/\/www.blackline.com\/about\/press-releases\/2013\/blackline-systems-completes-soc-2-type-2-and-soc-3-security\/\" target=\"_blank\" rel=\"noreferrer noopener\">Blackline<\/a>, for example. For those organizations, obtaining both SOC 1 and SOC 2 reports help satisfy all of their stakeholders.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">SOC Compliance Doesn\u2019t Have to Be Difficult<\/h2>\n\n\n\n<p>Understanding what SOC reports are and how to achieve them can feel overwhelming. There are so many checklists to complete, and audits are very high stakes. Without SOC 1 or SOC 2 reports, companies put their reputation and potential profits at risk. But the good news is that passing SOC audits doesn\u2019t have to be complicated if you lay the right foundation.<\/p>\n\n\n\n<p>The <a href=\"https:\/\/jumpcloud.com\/why-jumpcloud\" target=\"_blank\" rel=\"noreferrer noopener\">JumpCloud Directory Platform<\/a> allows IT to enact and enforce policies across your organization, no matter where they work. IT can update and deploy new policies, monitor user and device data, and create internal audit reports\u4e00all from one central console.&nbsp;<\/p>\n\n\n\n<p>Admins can identify and resolve issues immediately, restoring balance to the organization and ensuring the business continues to operate consistently and reliably. JumpCloud also has an API that plugs directly into auditors\u2019 third-party systems, making audit season a breeze.&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">SOC 2 Compliance: As Painless As <em>Enforce, Prove, Repeat<\/em>.<\/h2>\n\n\n\n<p>Whether you want to learn more about SOC compliance or you\u2019re ready to start working toward achieving it, JumpCloud\u2019s <a href=\"https:\/\/jumpcloud.com\/resources\/it-compliance-quickstart-guide\" target=\"_blank\" rel=\"noreferrer noopener\">IT Compliance Quickstart Guide<\/a> was designed to get IT professionals the resources they need to prepare for an audit or shore up their IT security baseline.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Learn more about SOC 1 vs SOC 2, the situations where you may need both reports, and tips for preparing your organization for an audit.<\/p>\n","protected":false},"author":143,"featured_media":44448,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_oasis_is_in_workflow":0,"_oasis_original":0,"_oasis_task_priority":"","inline_featured_image":false,"footnotes":""},"categories":[23,2337],"tags":[],"collection":[2775],"platform":[],"funnel_stage":[3016],"coauthors":[2533],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v22.9 (Yoast SEO v22.9) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>SOC 1 vs SOC 2 Audits: What&#039;s the Difference? - JumpCloud<\/title>\n<meta name=\"description\" content=\"Learn more about SOC 1 vs SOC 2, the situations where you may need both reports, and tips for preparing your organization for an audit.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/jumpcloud.com\/blog\/soc-1-vs-soc-2\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"SOC 1 vs SOC 2 Audits: What&#039;s the Difference?\" \/>\n<meta property=\"og:description\" content=\"Learn more about SOC 1 vs SOC 2, the situations where you may need both reports, and tips for preparing your organization for an audit.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/jumpcloud.com\/blog\/soc-1-vs-soc-2\" \/>\n<meta property=\"og:site_name\" content=\"JumpCloud\" \/>\n<meta property=\"article:author\" content=\"matt.renstrom\" \/>\n<meta property=\"article:published_time\" content=\"2023-03-21T13:54:47+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-08-30T13:22:16+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2020\/03\/system-insights-devops-telemetry-data.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"780\" \/>\n\t<meta property=\"og:image:height\" content=\"482\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Brenna Lee\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Brenna Lee\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/soc-1-vs-soc-2#article\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/soc-1-vs-soc-2\"},\"author\":{\"name\":\"Brenna Lee\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/person\/359d7999806d5e67935965c2dd3d28e7\"},\"headline\":\"SOC 1 vs SOC 2 Audits: What&#8217;s the Difference?\",\"datePublished\":\"2023-03-21T13:54:47+00:00\",\"dateModified\":\"2023-08-30T13:22:16+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/soc-1-vs-soc-2\"},\"wordCount\":1179,\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/soc-1-vs-soc-2#primaryimage\"},\"thumbnailUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2020\/03\/system-insights-devops-telemetry-data.jpg\",\"articleSection\":[\"Best Practices\",\"Remote Work\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/soc-1-vs-soc-2\",\"url\":\"https:\/\/jumpcloud.com\/blog\/soc-1-vs-soc-2\",\"name\":\"SOC 1 vs SOC 2 Audits: What's the Difference? - JumpCloud\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/soc-1-vs-soc-2#primaryimage\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/soc-1-vs-soc-2#primaryimage\"},\"thumbnailUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2020\/03\/system-insights-devops-telemetry-data.jpg\",\"datePublished\":\"2023-03-21T13:54:47+00:00\",\"dateModified\":\"2023-08-30T13:22:16+00:00\",\"description\":\"Learn more about SOC 1 vs SOC 2, the situations where you may need both reports, and tips for preparing your organization for an audit.\",\"breadcrumb\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/soc-1-vs-soc-2#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/jumpcloud.com\/blog\/soc-1-vs-soc-2\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/soc-1-vs-soc-2#primaryimage\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2020\/03\/system-insights-devops-telemetry-data.jpg\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2020\/03\/system-insights-devops-telemetry-data.jpg\",\"width\":780,\"height\":482,\"caption\":\"machine used for measuring\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/soc-1-vs-soc-2#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/jumpcloud.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"SOC 1 vs SOC 2 Audits: What&#8217;s the Difference?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/jumpcloud.com\/#website\",\"url\":\"https:\/\/jumpcloud.com\/\",\"name\":\"JumpCloud\",\"description\":\"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.\",\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/jumpcloud.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/jumpcloud.com\/#organization\",\"name\":\"JumpCloud\",\"url\":\"https:\/\/jumpcloud.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"width\":598,\"height\":101,\"caption\":\"JumpCloud\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/person\/359d7999806d5e67935965c2dd3d28e7\",\"name\":\"Brenna Lee\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/person\/image\/a512f44ee3cc1a59010e879f81d8b53c\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/967dd7256974fbbeb3db3f2549c2da47?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/967dd7256974fbbeb3db3f2549c2da47?s=96&d=mm&r=g\",\"caption\":\"Brenna Lee\"},\"description\":\"Brenna is a Content Writer at JumpCloud that loves learning about and immersing herself in new technologies. Outside of the [remote] office, she loves traveling and exploring the outdoors!\",\"sameAs\":[\"https:\/\/jumpcloud.com\/blog\",\"matt.renstrom\",\"stefano.tomasello@jumpcloud.com\"]}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"SOC 1 vs SOC 2 Audits: What's the Difference? - JumpCloud","description":"Learn more about SOC 1 vs SOC 2, the situations where you may need both reports, and tips for preparing your organization for an audit.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/jumpcloud.com\/blog\/soc-1-vs-soc-2","og_locale":"en_US","og_type":"article","og_title":"SOC 1 vs SOC 2 Audits: What's the Difference?","og_description":"Learn more about SOC 1 vs SOC 2, the situations where you may need both reports, and tips for preparing your organization for an audit.","og_url":"https:\/\/jumpcloud.com\/blog\/soc-1-vs-soc-2","og_site_name":"JumpCloud","article_author":"matt.renstrom","article_published_time":"2023-03-21T13:54:47+00:00","article_modified_time":"2023-08-30T13:22:16+00:00","og_image":[{"width":780,"height":482,"url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2020\/03\/system-insights-devops-telemetry-data.jpg","type":"image\/jpeg"}],"author":"Brenna Lee","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Brenna Lee","Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/jumpcloud.com\/blog\/soc-1-vs-soc-2#article","isPartOf":{"@id":"https:\/\/jumpcloud.com\/blog\/soc-1-vs-soc-2"},"author":{"name":"Brenna Lee","@id":"https:\/\/jumpcloud.com\/#\/schema\/person\/359d7999806d5e67935965c2dd3d28e7"},"headline":"SOC 1 vs SOC 2 Audits: What&#8217;s the Difference?","datePublished":"2023-03-21T13:54:47+00:00","dateModified":"2023-08-30T13:22:16+00:00","mainEntityOfPage":{"@id":"https:\/\/jumpcloud.com\/blog\/soc-1-vs-soc-2"},"wordCount":1179,"publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"image":{"@id":"https:\/\/jumpcloud.com\/blog\/soc-1-vs-soc-2#primaryimage"},"thumbnailUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2020\/03\/system-insights-devops-telemetry-data.jpg","articleSection":["Best Practices","Remote Work"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/jumpcloud.com\/blog\/soc-1-vs-soc-2","url":"https:\/\/jumpcloud.com\/blog\/soc-1-vs-soc-2","name":"SOC 1 vs SOC 2 Audits: What's the Difference? - JumpCloud","isPartOf":{"@id":"https:\/\/jumpcloud.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/jumpcloud.com\/blog\/soc-1-vs-soc-2#primaryimage"},"image":{"@id":"https:\/\/jumpcloud.com\/blog\/soc-1-vs-soc-2#primaryimage"},"thumbnailUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2020\/03\/system-insights-devops-telemetry-data.jpg","datePublished":"2023-03-21T13:54:47+00:00","dateModified":"2023-08-30T13:22:16+00:00","description":"Learn more about SOC 1 vs SOC 2, the situations where you may need both reports, and tips for preparing your organization for an audit.","breadcrumb":{"@id":"https:\/\/jumpcloud.com\/blog\/soc-1-vs-soc-2#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/jumpcloud.com\/blog\/soc-1-vs-soc-2"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/blog\/soc-1-vs-soc-2#primaryimage","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2020\/03\/system-insights-devops-telemetry-data.jpg","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2020\/03\/system-insights-devops-telemetry-data.jpg","width":780,"height":482,"caption":"machine used for measuring"},{"@type":"BreadcrumbList","@id":"https:\/\/jumpcloud.com\/blog\/soc-1-vs-soc-2#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/jumpcloud.com\/"},{"@type":"ListItem","position":2,"name":"SOC 1 vs SOC 2 Audits: What&#8217;s the Difference?"}]},{"@type":"WebSite","@id":"https:\/\/jumpcloud.com\/#website","url":"https:\/\/jumpcloud.com\/","name":"JumpCloud","description":"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.","publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/jumpcloud.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/jumpcloud.com\/#organization","name":"JumpCloud","url":"https:\/\/jumpcloud.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","width":598,"height":101,"caption":"JumpCloud"},"image":{"@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/jumpcloud.com\/#\/schema\/person\/359d7999806d5e67935965c2dd3d28e7","name":"Brenna Lee","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/person\/image\/a512f44ee3cc1a59010e879f81d8b53c","url":"https:\/\/secure.gravatar.com\/avatar\/967dd7256974fbbeb3db3f2549c2da47?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/967dd7256974fbbeb3db3f2549c2da47?s=96&d=mm&r=g","caption":"Brenna Lee"},"description":"Brenna is a Content Writer at JumpCloud that loves learning about and immersing herself in new technologies. Outside of the [remote] office, she loves traveling and exploring the outdoors!","sameAs":["https:\/\/jumpcloud.com\/blog","matt.renstrom","stefano.tomasello@jumpcloud.com"]}]}},"_links":{"self":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts\/66303"}],"collection":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/users\/143"}],"replies":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/comments?post=66303"}],"version-history":[{"count":3,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts\/66303\/revisions"}],"predecessor-version":[{"id":96719,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts\/66303\/revisions\/96719"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media\/44448"}],"wp:attachment":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media?parent=66303"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/categories?post=66303"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/tags?post=66303"},{"taxonomy":"collection","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/collection?post=66303"},{"taxonomy":"platform","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/platform?post=66303"},{"taxonomy":"funnel_stage","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/funnel_stage?post=66303"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/coauthors?post=66303"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}