SOC 2 is one of the Service Organization Control (SOC) Frameworks developed by the American Institute of CPAs (AICPA). Certified accounting firms use this framework to audit, assess, and attest to a company’s compliance and security practices against the Trust Service Criteria (TSC): security, availability, confidentiality, processing integrity, and privacy. Security is the only required criteria to undergo a SOC 2 audit.