# SOC 2 Type II Report

Service Organization Controls (SOC) 2 is a compliance report standard defined by the American Institute of Certified Public Accountants (AICPA). These SOC 2 compliance reports provide users with an assurance about the controls at a service organization relevant to security availability, and processing integrity of the systems used to process users’ data and the confidentiality and privacy of the information processed by these systems.

## What is the Goal of SOC 2 Type II Report?

The main purpose of earning SOC 2 compliance is to demonstrate to customers that a respected third party has examined your services and found that they meet five “trust service principles”.

**Security**  
Information and systems are protected against unauthorized access and disclosure of information.

**Availability**  
Information and systems are for operation and use to meet the entity’s objectives.

**Processing Integrity**  
System processing is complete, valid, accurate, timely, and authorized.

**Confidentiality**  
Information designated as confidential is adequately protected.

**Privacy**  
Personal information is collected, used, retained, disclosed, and disposed to meet the entity’s objectives.

## What is SOC 2 Type II Report?

A SOC 2 report is the result of an audit conducted by independent auditing and accounting firm based on the criteria defined by the AICPA. The audit can take three to six months to complete.

There are two types of SOC 2 reports: a Type I report on management’s description of the systems in place and the suitability of the design of controls and a Type II report on the suitability of the design and operating effectiveness of the controls described therein to meet the applicable trust services criteria. The responsibility of the auditing firm is to build the report by expressing an opinion on the fairness of the presentation of the descriptions, the suitability, and the effectiveness of the control measures.

During the audit period, the stated controls for the following Check Point products operated effectively to meet the applicable trust services criteria:

### Workspace Security  
- [Endpoint Security](https://www.checkpoint.com/harmony/endpoint/)  
- [Mobile Security](https://www.checkpoint.com/harmony/mobile-security/mobile/)  
- [Browse Security](https://www.checkpoint.com/harmony/browse/)  
- [ZoneAlarm Mobile](https://www.zonealarm.com/mobile-security)  
- [Email Security](https://www.checkpoint.com/harmony/email-security/)  
- [XDR](https://www.checkpoint.com/infinity/xdr/)

### Hybrid Mesh Network Security  
- [SASE](https://sase.checkpoint.com/)  
- [SaaS Security](https://www.checkpoint.com/harmony/saas/)  
- [Check Point Portal](https://www.checkpoint.com/infinity/portal/)  
- [ThreatCloud AI](https://www.checkpoint.com/ai/threatcloud/)  
- [Playblocks](https://www.checkpoint.com/quantum/unified-management/playblocks/)  
- [Identity and Trust](https://www.checkpoint.com/resources/items/solution-brief-check-point-identity-and-trust)  
- [Events & AIOps](https://www.checkpoint.com/infinity/events/)  
- [Smart-1 Cloud (Security Management)](https://www.checkpoint.com/quantum/unified-cyber-security-platform/smart-1-appliances/)  
- [WAF – Application Security](https://www.checkpoint.com/cloudguard/waf/)  
- [App Protect](https://www.checkpoint.com/harmony/email-security/file-sharing/)

### Exposure Management  
- [External Risk Management (ERM)](https://www.checkpoint.com/services/strategy-and-risk/external-risk-management/)  
- [Threat Exposure Management (TEM)](https://www.checkpoint.com/exposure-management/threat-intelligence/)

### More Products  
- [MDR](https://www.checkpoint.com/infinity/mdr-mpr/)  
- [Cloud Security Posture](https://www.checkpoint.com/cloudguard/)  
- [Cloud Network Security](https://www.checkpoint.com/cloudguard/cloud-network-security/)  
- [Workload Protection](https://www.checkpoint.com/cloudguard/wiz/)  
- [Check Point Code Security](https://www.checkpoint.com/downloads/company/cloudguard-code-security-data-sheet.pdf)

## Additional Resources  
### Downloads  
- [Next Generation Firewall Buyer’s Guide](https://pages.checkpoint.com/next-generation-firewall-buyers-guide.html)  
- [Enterprise Security Performance Whitepaper](https://resources.checkpoint.com/cyber-security-resources/enterprise-security-perfomance-testing-and-sizing)

### Videos  
- [Prevent 5th Generation Cyber Attacks with Check Point](https://www.youtube.com/watch?v=dqEQRnx9z_U)

### Links  
- [Security Gateway Appliances](https://www.checkpoint.com/quantum/next-generation-firewall/)  
- [Cyber Security Management](https://www.checkpoint.com/quantum/unified-cyber-security-platform/)  
-  Under Attack?