The A person useful thing “compliance” captures: it’s an ongoing condition, not a just one-time achievement. Controls can degrade; your compliance position adjustments when they do. That framing is correct. The term just doesn’t show you irrespective of whether everyone has verified it. The auditor is attesting on the state https://www.consultantsfactory.com/article/soc2