SOC 2 reports assess controls against the Trust Services Criteria. Certificate-based authentication, encryption in transit and monitoring support the Common Criteria for logical access (CC6) and system operations (CC7).
