by Assurion Services | Oct 5, 2026 | Security Testing
The AICPA trust services criteria do not require a penetration test. The words do not appear as a mandate anywhere in the criteria themselves. Yet almost every SOC 2 report you will ever read includes a pen test control, and almost every auditor will ask for the...
