A: SOC (System and Organization Controls) reports are issued after AICPA-based audits assessing risks, controls, security, confidentiality, processing integrity, and availability.