What is Suitable criteria?
In short
In an attestation engagement, criteria are the benchmarks used to measure or evaluate the subject matter. They must be suitable, meaning relevant, objective, measurable and complete, and available to the intended users.
Key takeaways
- Criteria set by standard-setters or regulators are generally suitable.
- Criteria suitable only for certain parties lead to a restricted-use report.
- Without suitable criteria, the practitioner can't accept the engagement.
Where it's tested
AUD: Attestation & System and Organization Controls (SOC) Engagements — study notes, a five-minute revision sheet and practice questions.
Practise: 3 questions
Question 1 of 3 · 0 answered
Which Trust Services Criterion must be included in every SOC 2 engagement?