SOC 2 management assertion
**Document control**
| Field | Value | |---|---| | Organization | [COMPANY NAME] | | Owner | [OWNER NAME / ROLE] | | Approver | [APPROVER NAME / ROLE] | | Version | [VERSION] | | Effective date | [YYYY-MM-DD] | | Next review | [YYYY-MM-DD] |
**Mapped criteria:** AICPA Description Criteria DC 200 and applicable 2017 Trust Services Criteria (2022 revised points of focus); report-specific mapping must be confirmed by the CPA firm.
> Coordinate the final wording with the engaged independent CPA firm. Type I and Type II assertions differ, and the precise criteria, dates, and system description must match the examination.
Management’s assertion We have prepared the accompanying description of [COMPANY NAME]’s [SYSTEM NAME] system titled “[SYSTEM DESCRIPTION TITLE]” for [DATE / PERIOD FROM DATE TO DATE] based on the criteria for a description of a service organization’s system in DC Section 200, *2018 Description Criteria for a Description of a Service Organization’s System in a SOC 2® Report*.
[COMPANY NAME] is responsible for: 1. identifying the [SYSTEM NAME] system and describing its boundaries; 2. identifying the principal service commitments and system requirements; 3. identifying risks that threaten achievement of those commitments and requirements; 4. designing, implementing, and operating controls to mitigate those risks; and 5. presenting the system description in accordance with the description criteria.
We assert that the system description is presented in accordance with the applicable description criteria and that the controls stated in the description were suitably designed, as of [TYPE I DATE / TYPE II PERIOD], to provide reasonable assurance that service commitments and system requirements were achieved based on the applicable Trust Services Criteria for [SECURITY AND OPTIONAL CATEGORIES].
**Type II only — retain if applicable:** We further assert that the controls operated effectively throughout the period [START DATE] to [END DATE] to provide reasonable assurance that service commitments and system requirements were achieved based on the applicable criteria.
Approval Authorized management representative: [NAME, TITLE] Signature: [SIGNATURE] Date: [YYYY-MM-DD]
---
**Disclaimer:** Educational template only — not legal advice, an audit opinion, or a guarantee of compliance. Adapt with qualified counsel and your auditor or assessor. ComplianceBase is vendor-neutral and independent.