The controls employed by the Firm are assessed under this theory together with the collection, use, disclosure, retention and disposal of this kind of information and facts in accordance with their Privacy Plan and the standards set forth from the AICPA’s typically acknowledged privacy concepts (GAPP). The security incident response https://www.nathanlabsadvisory.com/blog/nathan/fast-affordable-soc-2-certification-services-in-the-usa/