{"id":14655,"date":"2026-10-01T07:50:56","date_gmt":"2026-10-01T07:50:56","guid":{"rendered":"https:\/\/cbqaglobal.com\/?p=14655"},"modified":"2026-10-01T07:50:58","modified_gmt":"2026-10-01T07:50:58","slug":"soc-2-type-1-vs-type-2","status":"publish","type":"post","link":"https:\/\/cbqaglobal.com\/id\/blog\/2026\/10\/01\/soc-2-type-1-vs-type-2\/","title":{"rendered":"SOC 2 Type 1 vs Type 2: Memahami Perbedaan dan Cara Memilihnya"},"content":{"rendered":"\n<p><strong>Executive Summary<\/strong><br><strong>SOC 2 Type 1 vs Type 2<\/strong><\/p>\n\n\n\n<p><em>Understanding the Difference, Evidence, Operating Effectiveness &amp; Readiness<\/em><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">1. Executive Overview<\/h2>\n\n\n\n<p><a href=\"https:\/\/cbqaglobal.com\/audit\/soc-2-attestation-services-for-security-and-operational-trust\/\"><strong>SOC 2<\/strong><\/a> Type 1 dan Type 2 sama-sama merupakan bagian dari <strong>SOC 2 examination<\/strong> berbasis AICPA Trust Services Criteria. Perbedaan utamanya terletak pada waktu evaluasi dan kedalaman penilaian terhadap kontrol.<\/p>\n\n\n\n<p><strong>SOC 2 Type 1<\/strong> menilai desain kontrol pada suatu titik waktu. Sementara itu, <strong>SOC 2 Type 2<\/strong> menilai desain kontrol sekaligus operating effectiveness selama periode tertentu.<\/p>\n\n\n\n<p>Karena itu, Type 2 tidak hanya melihat apakah kontrol telah dirancang. Type 2 juga melihat bagaimana kontrol tersebut benar-benar dijalankan selama periode pemeriksaan.<\/p>\n\n\n\n<p>Perbedaan ini penting bagi organisasi yang perlu memberikan assurance kepada pelanggan atau business partner. Dengan demikian, organisasi perlu memahami bagaimana kontrol dalam sistem dan layanan dirancang serta dijalankan.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">2. Perbedaan Fundamental<\/h2>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><th>Aspek<\/th><th>SOC 2 Type 1<\/th><th>SOC 2 Type 2<\/th><\/tr><\/thead><tbody><tr><td>Fokus<\/td><td>Desain kontrol<\/td><td>Desain dan operating effectiveness<\/td><\/tr><tr><td>Waktu evaluasi<\/td><td>Pada tanggal tertentu<\/td><td>Selama periode tertentu<\/td><\/tr><tr><td>Pertanyaan utama<\/td><td>Apakah kontrol telah dirancang dengan tepat?<\/td><td>Apakah kontrol dirancang dengan tepat dan benar-benar beroperasi selama periode pemeriksaan?<\/td><\/tr><tr><td>Evidence<\/td><td>Mendukung keberadaan dan desain kontrol<\/td><td>Mendukung pelaksanaan kontrol selama periode<\/td><\/tr><tr><td>Konsistensi operasi<\/td><td>Bukan fokus utama<\/td><td>Menjadi bagian penting evaluasi<\/td><\/tr><tr><td>Kesiapan<\/td><td>Fokus pada kesiapan desain kontrol<\/td><td>Fokus pada desain, evidence, konsistensi, dan pelaksanaan kontrol<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p>Dengan demikian, <strong>SOC 2 Type 2 bukan sekadar Type 1 dengan lebih banyak dokumen<\/strong>. Perbedaannya terletak pada evaluasi terhadap bagaimana kontrol benar-benar beroperasi selama periode pemeriksaan.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">3. Insight Utama: Evidence \u2260 Dokumentasi<\/h2>\n\n\n\n<p>Dalam <strong>SOC 2 Type 2<\/strong>, evidence berfungsi untuk menunjukkan bahwa kontrol yang telah dirancang benar-benar dilaksanakan.<\/p>\n\n\n\n<p>Sebagai contoh, organisasi dapat memiliki kontrol <strong>user access review<\/strong>. Namun, keberadaan prosedur saja belum cukup. Examination juga perlu melihat bagaimana review dilakukan dan evidence yang dihasilkan selama periode pemeriksaan.<\/p>\n\n\n\n<p>Beberapa pertanyaan yang dapat membantu menilai evidence antara lain:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Siapa yang melakukan review?<\/li>\n\n\n\n<li>Kapan review dilakukan?<\/li>\n\n\n\n<li>Apa yang diperiksa?<\/li>\n\n\n\n<li>Bagaimana hasil review dicatat?<\/li>\n\n\n\n<li>Apa tindakan yang dilakukan jika ditemukan akses yang tidak sesuai?<\/li>\n\n\n\n<li>Apakah pelaksanaan tersebut dapat didukung oleh evidence?<\/li>\n<\/ul>\n\n\n\n<p>Secara sederhana:<\/p>\n\n\n\n<p><strong>Policy\/Procedure \u2192 menjelaskan apa yang seharusnya dilakukan<\/strong><\/p>\n\n\n\n<p><strong>Evidence \u2192 menunjukkan apa yang benar-benar dilakukan<\/strong><\/p>\n\n\n\n<p>Oleh karena itu, evidence memiliki peran penting dalam <strong>SOC 2 Type 2 readiness<\/strong>. Organisasi tidak hanya perlu memiliki dokumentasi, tetapi juga perlu memastikan bahwa kontrol benar-benar dilaksanakan dan dapat didukung oleh evidence.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">4. Type 2 Menguji Operating Reality<\/h2>\n\n\n\n<p>Salah satu perspektif penting dalam <strong>SOC 2 Type 1 vs Type 2<\/strong> adalah perhatian terhadap operating effectiveness.<\/p>\n\n\n\n<p>Type 1 berfokus pada desain kontrol pada suatu titik waktu. Sebaliknya, Type 2 mengevaluasi desain dan operating effectiveness selama periode tertentu.<\/p>\n\n\n\n<p>Dengan kata lain, fokusnya bergeser dari pertanyaan:<\/p>\n\n\n\n<p><strong>\u201cDo we have the control?\u201d<\/strong><\/p>\n\n\n\n<p>menjadi:<\/p>\n\n\n\n<p><strong>\u201cCan we demonstrate that the control operated consistently over time?\u201d<\/strong><\/p>\n\n\n\n<p>Karena itu, pendekatan Type 2 dapat diringkas melalui alur berikut:<\/p>\n\n\n\n<p><strong>SCOPE \u2192 CONTROL \u2192 EVIDENCE \u2192 OPERATE \u2192 ASSURANCE<\/strong><\/p>\n\n\n\n<p>Kerangka tersebut membantu organisasi melihat hubungan antara scope, kontrol, evidence, pelaksanaan, dan assurance.<\/p>\n\n\n\n<h1 class=\"wp-block-heading\">5. Framework Persiapan SOC 2 Type 2<\/h1>\n\n\n\n<p>Persiapan <strong>SOC 2 Type 2<\/strong> membutuhkan pendekatan yang sistematis. Organisasi perlu memahami scope, menentukan kontrol yang relevan, menyiapkan evidence, dan memastikan kontrol berjalan secara konsisten.<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><th>Tahap<\/th><th>Fokus<\/th><th>Outcome<\/th><\/tr><\/thead><tbody><tr><td>SCOPE<\/td><td>Tentukan sistem, layanan, proses, dan informasi yang masuk examination.<\/td><td>Batas examination yang jelas.<\/td><\/tr><tr><td>CONTROL<\/td><td>Identifikasi kontrol berdasarkan risiko dan kriteria yang relevan.<\/td><td>Control framework yang relevan.<\/td><\/tr><tr><td>EVIDENCE<\/td><td>Tentukan bukti yang menunjukkan kontrol telah dijalankan.<\/td><td>Evidence yang dapat diverifikasi.<\/td><\/tr><tr><td>OPERATE<\/td><td>Pastikan kontrol dijalankan secara konsisten sesuai desain.<\/td><td>Operating effectiveness.<\/td><\/tr><tr><td>ASSURANCE<\/td><td>Siapkan organisasi untuk examination dan reporting.<\/td><td>Readiness untuk examination.<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p>Selain itu, setiap tahap perlu saling terhubung. Scope menentukan kontrol yang relevan. Selanjutnya, kontrol menghasilkan aktivitas yang perlu didukung evidence.<\/p>\n\n\n\n<p>Setelah itu, organisasi perlu memastikan kontrol tersebut dijalankan secara konsisten. Dengan pendekatan ini, setiap aktivitas memiliki hubungan yang jelas antara kontrol, pelaksanaan, evidence, dan assurance.<\/p>\n\n\n\n<p>Kerangka tersebut membantu organisasi memahami bahwa <strong>SOC 2 readiness<\/strong> bukan hanya persoalan dokumentasi. Konsistensi pelaksanaan kontrol juga menjadi bagian penting, khususnya ketika mempersiapkan Type 2.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">6. Apa Perbedaan SOC 1 dan SOC 2?<\/h2>\n\n\n\n<p><strong>SOC 1 vs SOC 2<\/strong> memiliki fokus assurance yang berbeda. SOC 1 berkaitan dengan kontrol pada service organization yang relevan terhadap <strong>Internal Control over Financial Reporting (ICFR)<\/strong> pengguna jasa. Sementara itu, SOC 2 berfokus pada kontrol yang relevan terhadap <strong>Security, Availability, Processing Integrity, Confidentiality, atau Privacy<\/strong> berdasarkan Trust Services Criteria.<\/p>\n\n\n\n<p>Dengan demikian, SOC 1 dan SOC 2 memiliki tujuan serta fokus evaluasi yang berbeda.<\/p>\n\n\n\n<p>Selain itu, Type 1 dan Type 2 bukan istilah yang eksklusif untuk SOC 2. Konsep tersebut juga digunakan dalam SOC 1.<\/p>\n\n\n\n<p><strong>Artikel Terkait:<\/strong> <a href=\"https:\/\/cbqaglobal.com\/id\/blog\/2026\/10\/01\/soc-2-definition-benefits\/\"><strong>Apa Itu SOC 2? Pengertian, Tujuan dan Manfaatnya bagi Perusahaan<\/strong><\/a><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">7. Bagaimana Menentukan Type 1 atau Type 2?<\/h2>\n\n\n\n<p>Pemilihan <strong>SOC 2 Type 1 atau Type 2<\/strong> perlu disesuaikan dengan kebutuhan assurance organisasi dan pihak yang membutuhkan laporan.<\/p>\n\n\n\n<p>Sebagai titik awal, organisasi dapat mempertimbangkan beberapa pertanyaan berikut:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Apakah organisasi perlu menunjukkan desain kontrol pada tanggal tertentu?<\/li>\n\n\n\n<li>Apakah pelanggan atau business partner membutuhkan informasi mengenai operating effectiveness selama periode tertentu?<\/li>\n\n\n\n<li>Apakah kontrol sudah berjalan secara konsisten dan dapat didukung evidence?<\/li>\n\n\n\n<li>Apa kebutuhan assurance yang diminta oleh pelanggan atau pihak terkait?<\/li>\n<\/ul>\n\n\n\n<p>Jawaban atas pertanyaan tersebut dapat membantu organisasi menentukan pendekatan yang sesuai dengan kebutuhan assurance dan kondisi kontrolnya.<\/p>\n\n\n\n<p>Dengan demikian, keputusan mengenai Type 1 atau Type 2 sebaiknya mempertimbangkan kebutuhan assurance, kondisi kontrol, serta kebutuhan pelanggan atau business partner.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">8. Terminologi Profesional: Examination, Report, dan Attestation<\/h2>\n\n\n\n<p>Dalam konteks teknis AICPA, istilah yang relevan antara lain <strong>SOC 2 examination<\/strong>, <strong>SOC 2 report<\/strong>, dan <strong>SOC 2 attestation<\/strong>.<\/p>\n\n\n\n<p>Karena itu, penggunaan terminologi yang tepat penting dalam komunikasi mengenai SOC 2.<\/p>\n\n\n\n<p>SOC 2 sebaiknya tidak disebut sebagai <strong>\u201csertifikasi SOC 2\u201d<\/strong> seperti sertifikasi standar manajemen. Istilah tersebut dapat menimbulkan pemahaman yang berbeda mengenai bentuk assurance yang diberikan.<\/p>\n\n\n\n<p>Dengan menggunakan istilah seperti <strong>SOC 2 examination<\/strong>, <strong>SOC 2 report<\/strong>, dan <strong>SOC 2 attestation<\/strong>, organisasi dapat menyampaikan informasi SOC 2 secara lebih tepat kepada pelanggan dan business partner.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">9. Key Takeaway<\/h2>\n\n\n\n<p><strong>SOC 2 Type 1 vs Type 2<\/strong> pada dasarnya berbeda dalam fokus dan periode evaluasi.<\/p>\n\n\n\n<p>SOC 2 Type 1 memberikan visibility terhadap desain kontrol pada suatu titik waktu. Sebaliknya, SOC 2 Type 2 memberikan insight terhadap desain dan operating effectiveness kontrol selama periode tertentu.<\/p>\n\n\n\n<p>Karena itu, tantangan utama Type 2 bukan sekadar membangun dokumentasi. Organisasi juga perlu membangun operational discipline agar kontrol dapat:<\/p>\n\n\n\n<p><strong>Designed \u2192 Implemented \u2192 Operated \u2192 Evidenced \u2192 Consistent \u2192 Examined<\/strong><\/p>\n\n\n\n<p>Pada akhirnya, kesiapan <a href=\"https:\/\/cbqaglobal.com\/audit\/soc-2-attestation-services-for-security-and-operational-trust\/\"><strong>SOC 2 Type 2<\/strong><\/a> dapat dipandang sebagai kemampuan organisasi untuk membuktikan bahwa kontrol yang dirancang benar-benar menjadi bagian dari operasi sehari-hari.<\/p>\n\n\n\n<p>Artinya, kontrol tidak hanya tersedia di dalam kebijakan atau prosedur. Kontrol juga perlu berjalan secara konsisten dan menghasilkan evidence yang dapat mendukung proses examination.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">10. Professional Perspective<\/h2>\n\n\n\n<p>Untuk kebutuhan komunikasi kepada pelanggan enterprise, <strong>SOC 2 Type 2<\/strong> dapat dipahami sebagai mekanisme assurance yang memberikan visibility terhadap bagaimana kontrol dirancang dan bagaimana kontrol tersebut beroperasi selama periode tertentu.<\/p>\n\n\n\n<p>Dalam proses <strong>SOC 2 readiness<\/strong>, fokus utama adalah membangun hubungan yang konsisten antara scope, risk, control, operation, evidence, dan assurance.<\/p>\n\n\n\n<p>Dengan pendekatan tersebut, organisasi dapat menghubungkan kebutuhan assurance pelanggan dengan praktik kontrol yang benar-benar berjalan dalam operasi sehari-hari.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Butuh Layanan SOC 2 untuk Perusahaan Anda?<\/h2>\n\n\n\n<p><a href=\"https:\/\/cbqaglobal.com\/\"><strong>CBQA Global<\/strong><\/a> menyediakan <strong>SOC 2 services<\/strong> untuk membantu organisasi mempersiapkan scope, controls, evidence, dan readiness sesuai kebutuhan proses examination.<\/p>\n\n\n\n<p><strong>Hubungi CBQA Global:<\/strong><\/p>\n\n\n\n<p><strong>WhatsApp:<\/strong> <a href=\"https:\/\/wa.me\/628118468777\">08118468777<\/a><br><strong>Phone:<\/strong> +62 21 2781 4200<br><strong>Email:<\/strong> <a href=\"mailto:marketing.cbqaglobal@gmail.com\">marketing.cbqaglobal@gmail.com<\/a><\/p>\n\n\n\n<p><strong>CBQA Global<\/strong><br><em>We Inspire in Trust.<\/em><br>Certification | Audit | Training | Sustainability<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Executive SummarySOC 2 Type 1 vs Type 2 Understanding the Difference, Evidence, Operating Effectiveness &amp; Readiness 1. Executive Overview SOC 2 Type 1 dan Type 2 sama-sama merupakan bagian dari SOC 2 examination berbasis AICPA Trust Services Criteria. Perbedaan utamanya terletak pada waktu evaluasi dan kedalaman penilaian terhadap kontrol. SOC 2 Type 1 menilai desain [&hellip;]<\/p>\n","protected":false},"author":7,"featured_media":14656,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[75,10,11,79],"tags":[203,185,204,202,187],"class_list":["post-14655","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-audit","category-iso-standard-update","category-news","category-sustainability","tag-soc-1-vs-soc-2","tag-soc-2","tag-soc-2-attestation","tag-soc-2-type-1","tag-soc-2-type-2"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>SOC 2 Type 1 vs Type 2: Perbedaan dan Cara Memilih<\/title>\n<meta name=\"description\" content=\"Pahami SOC 2 Type 1 vs Type 2, perbedaan desain kontrol, evidence, operating effectiveness, dan cara mempersiapkan organisasi untuk SOC 2 exam\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cbqaglobal.com\/id\/blog\/2026\/10\/01\/soc-2-type-1-vs-type-2\/\" \/>\n<meta property=\"og:locale\" content=\"id_ID\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"SOC 2 Type 1 vs Type 2: Perbedaan dan Cara Memilih\" \/>\n<meta property=\"og:description\" content=\"Pahami SOC 2 Type 1 vs Type 2, perbedaan desain kontrol, evidence, operating effectiveness, dan cara mempersiapkan organisasi untuk SOC 2 exam\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cbqaglobal.com\/id\/blog\/2026\/10\/01\/soc-2-type-1-vs-type-2\/\" \/>\n<meta property=\"og:site_name\" content=\"cbqaglobal.com\" \/>\n<meta property=\"article:published_time\" content=\"2026-10-01T07:50:56+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-10-01T07:50:58+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/cbqaglobal.com\/wp-content\/uploads\/2026\/10\/Resize_Thumbnail_businessman-working-office-revenue-finance-growth.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"1080\" \/>\n\t<meta property=\"og:image:height\" content=\"559\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"author\" content=\"CBQA Global\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Ditulis oleh\" \/>\n\t<meta name=\"twitter:data1\" content=\"CBQA Global\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimasi waktu membaca\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 menit\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/cbqaglobal.com\\\/id\\\/blog\\\/2026\\\/10\\\/01\\\/soc-2-type-1-vs-type-2\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/cbqaglobal.com\\\/id\\\/blog\\\/2026\\\/10\\\/01\\\/soc-2-type-1-vs-type-2\\\/\"},\"author\":{\"name\":\"CBQA Global\",\"@id\":\"https:\\\/\\\/cbqaglobal.com\\\/#\\\/schema\\\/person\\\/85b0d169c5b4dd2858125fc38186f054\"},\"headline\":\"SOC 2 Type 1 vs Type 2: Memahami Perbedaan dan Cara Memilihnya\",\"datePublished\":\"2026-10-01T07:50:56+00:00\",\"dateModified\":\"2026-10-01T07:50:58+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/cbqaglobal.com\\\/id\\\/blog\\\/2026\\\/10\\\/01\\\/soc-2-type-1-vs-type-2\\\/\"},\"wordCount\":1095,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/cbqaglobal.com\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/cbqaglobal.com\\\/id\\\/blog\\\/2026\\\/10\\\/01\\\/soc-2-type-1-vs-type-2\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/cbqaglobal.com\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/Resize_Thumbnail_businessman-working-office-revenue-finance-growth.webp\",\"keywords\":[\"SOC 1 vs SOC 2\",\"SOC 2\",\"SOC 2 Attestation\",\"SOC 2 Type 1\",\"SOC 2 Type 2\"],\"articleSection\":[\"Audit\",\"ISO Standard Update\",\"News\",\"Sustainability\"],\"inLanguage\":\"id\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/cbqaglobal.com\\\/id\\\/blog\\\/2026\\\/10\\\/01\\\/soc-2-type-1-vs-type-2\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/cbqaglobal.com\\\/id\\\/blog\\\/2026\\\/10\\\/01\\\/soc-2-type-1-vs-type-2\\\/\",\"url\":\"https:\\\/\\\/cbqaglobal.com\\\/id\\\/blog\\\/2026\\\/10\\\/01\\\/soc-2-type-1-vs-type-2\\\/\",\"name\":\"SOC 2 Type 1 vs Type 2: Perbedaan dan Cara Memilih\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/cbqaglobal.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/cbqaglobal.com\\\/id\\\/blog\\\/2026\\\/10\\\/01\\\/soc-2-type-1-vs-type-2\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/cbqaglobal.com\\\/id\\\/blog\\\/2026\\\/10\\\/01\\\/soc-2-type-1-vs-type-2\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/cbqaglobal.com\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/Resize_Thumbnail_businessman-working-office-revenue-finance-growth.webp\",\"datePublished\":\"2026-10-01T07:50:56+00:00\",\"dateModified\":\"2026-10-01T07:50:58+00:00\",\"description\":\"Pahami SOC 2 Type 1 vs Type 2, perbedaan desain kontrol, evidence, operating effectiveness, dan cara mempersiapkan organisasi untuk SOC 2 exam\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/cbqaglobal.com\\\/id\\\/blog\\\/2026\\\/10\\\/01\\\/soc-2-type-1-vs-type-2\\\/#breadcrumb\"},\"inLanguage\":\"id\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/cbqaglobal.com\\\/id\\\/blog\\\/2026\\\/10\\\/01\\\/soc-2-type-1-vs-type-2\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"id\",\"@id\":\"https:\\\/\\\/cbqaglobal.com\\\/id\\\/blog\\\/2026\\\/10\\\/01\\\/soc-2-type-1-vs-type-2\\\/#primaryimage\",\"url\":\"https:\\\/\\\/cbqaglobal.com\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/Resize_Thumbnail_businessman-working-office-revenue-finance-growth.webp\",\"contentUrl\":\"https:\\\/\\\/cbqaglobal.com\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/Resize_Thumbnail_businessman-working-office-revenue-finance-growth.webp\",\"width\":1080,\"height\":559,\"caption\":\"SOC 2 Type 1 berfokus pada desain kontrol pada suatu titik waktu, sedangkan SOC 2 Type 2 mengevaluasi desain dan operating effectiveness selama periode tertentu.\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/cbqaglobal.com\\\/id\\\/blog\\\/2026\\\/10\\\/01\\\/soc-2-type-1-vs-type-2\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/cbqaglobal.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"SOC 2 Type 1 vs Type 2: Memahami Perbedaan dan Cara Memilihnya\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/cbqaglobal.com\\\/#website\",\"url\":\"https:\\\/\\\/cbqaglobal.com\\\/\",\"name\":\"cbqaglobal.com\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/cbqaglobal.com\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/cbqaglobal.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"id\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/cbqaglobal.com\\\/#organization\",\"name\":\"cbqaglobal.com\",\"url\":\"https:\\\/\\\/cbqaglobal.com\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"id\",\"@id\":\"https:\\\/\\\/cbqaglobal.com\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/cbqaglobal.com\\\/wp-content\\\/uploads\\\/2026\\\/04\\\/1-Logo-CBQA-Global-scaled.png\",\"contentUrl\":\"https:\\\/\\\/cbqaglobal.com\\\/wp-content\\\/uploads\\\/2026\\\/04\\\/1-Logo-CBQA-Global-scaled.png\",\"width\":2560,\"height\":1810,\"caption\":\"cbqaglobal.com\"},\"image\":{\"@id\":\"https:\\\/\\\/cbqaglobal.com\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/cbqaglobal.com\\\/#\\\/schema\\\/person\\\/85b0d169c5b4dd2858125fc38186f054\",\"name\":\"CBQA Global\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"id\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/6c9bbd2abed8c8a68bcef6da0b8f6aa4139bffd9ac8cb7c0c5d90bb73f3e3ac0?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/6c9bbd2abed8c8a68bcef6da0b8f6aa4139bffd9ac8cb7c0c5d90bb73f3e3ac0?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/6c9bbd2abed8c8a68bcef6da0b8f6aa4139bffd9ac8cb7c0c5d90bb73f3e3ac0?s=96&d=mm&r=g\",\"caption\":\"CBQA Global\"},\"url\":\"https:\\\/\\\/cbqaglobal.com\\\/id\\\/blog\\\/author\\\/rizkyamanda\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"SOC 2 Type 1 vs Type 2: Perbedaan dan Cara Memilih","description":"Pahami SOC 2 Type 1 vs Type 2, perbedaan desain kontrol, evidence, operating effectiveness, dan cara mempersiapkan organisasi untuk SOC 2 exam","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cbqaglobal.com\/id\/blog\/2026\/10\/01\/soc-2-type-1-vs-type-2\/","og_locale":"id_ID","og_type":"article","og_title":"SOC 2 Type 1 vs Type 2: Perbedaan dan Cara Memilih","og_description":"Pahami SOC 2 Type 1 vs Type 2, perbedaan desain kontrol, evidence, operating effectiveness, dan cara mempersiapkan organisasi untuk SOC 2 exam","og_url":"https:\/\/cbqaglobal.com\/id\/blog\/2026\/10\/01\/soc-2-type-1-vs-type-2\/","og_site_name":"cbqaglobal.com","article_published_time":"2026-10-01T07:50:56+00:00","article_modified_time":"2026-10-01T07:50:58+00:00","og_image":[{"width":1080,"height":559,"url":"https:\/\/cbqaglobal.com\/wp-content\/uploads\/2026\/10\/Resize_Thumbnail_businessman-working-office-revenue-finance-growth.webp","type":"image\/webp"}],"author":"CBQA Global","twitter_card":"summary_large_image","twitter_misc":{"Ditulis oleh":"CBQA Global","Estimasi waktu membaca":"6 menit"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/cbqaglobal.com\/id\/blog\/2026\/10\/01\/soc-2-type-1-vs-type-2\/#article","isPartOf":{"@id":"https:\/\/cbqaglobal.com\/id\/blog\/2026\/10\/01\/soc-2-type-1-vs-type-2\/"},"author":{"name":"CBQA Global","@id":"https:\/\/cbqaglobal.com\/#\/schema\/person\/85b0d169c5b4dd2858125fc38186f054"},"headline":"SOC 2 Type 1 vs Type 2: Memahami Perbedaan dan Cara Memilihnya","datePublished":"2026-10-01T07:50:56+00:00","dateModified":"2026-10-01T07:50:58+00:00","mainEntityOfPage":{"@id":"https:\/\/cbqaglobal.com\/id\/blog\/2026\/10\/01\/soc-2-type-1-vs-type-2\/"},"wordCount":1095,"commentCount":0,"publisher":{"@id":"https:\/\/cbqaglobal.com\/#organization"},"image":{"@id":"https:\/\/cbqaglobal.com\/id\/blog\/2026\/10\/01\/soc-2-type-1-vs-type-2\/#primaryimage"},"thumbnailUrl":"https:\/\/cbqaglobal.com\/wp-content\/uploads\/2026\/10\/Resize_Thumbnail_businessman-working-office-revenue-finance-growth.webp","keywords":["SOC 1 vs SOC 2","SOC 2","SOC 2 Attestation","SOC 2 Type 1","SOC 2 Type 2"],"articleSection":["Audit","ISO Standard Update","News","Sustainability"],"inLanguage":"id","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/cbqaglobal.com\/id\/blog\/2026\/10\/01\/soc-2-type-1-vs-type-2\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/cbqaglobal.com\/id\/blog\/2026\/10\/01\/soc-2-type-1-vs-type-2\/","url":"https:\/\/cbqaglobal.com\/id\/blog\/2026\/10\/01\/soc-2-type-1-vs-type-2\/","name":"SOC 2 Type 1 vs Type 2: Perbedaan dan Cara Memilih","isPartOf":{"@id":"https:\/\/cbqaglobal.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/cbqaglobal.com\/id\/blog\/2026\/10\/01\/soc-2-type-1-vs-type-2\/#primaryimage"},"image":{"@id":"https:\/\/cbqaglobal.com\/id\/blog\/2026\/10\/01\/soc-2-type-1-vs-type-2\/#primaryimage"},"thumbnailUrl":"https:\/\/cbqaglobal.com\/wp-content\/uploads\/2026\/10\/Resize_Thumbnail_businessman-working-office-revenue-finance-growth.webp","datePublished":"2026-10-01T07:50:56+00:00","dateModified":"2026-10-01T07:50:58+00:00","description":"Pahami SOC 2 Type 1 vs Type 2, perbedaan desain kontrol, evidence, operating effectiveness, dan cara mempersiapkan organisasi untuk SOC 2 exam","breadcrumb":{"@id":"https:\/\/cbqaglobal.com\/id\/blog\/2026\/10\/01\/soc-2-type-1-vs-type-2\/#breadcrumb"},"inLanguage":"id","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cbqaglobal.com\/id\/blog\/2026\/10\/01\/soc-2-type-1-vs-type-2\/"]}]},{"@type":"ImageObject","inLanguage":"id","@id":"https:\/\/cbqaglobal.com\/id\/blog\/2026\/10\/01\/soc-2-type-1-vs-type-2\/#primaryimage","url":"https:\/\/cbqaglobal.com\/wp-content\/uploads\/2026\/10\/Resize_Thumbnail_businessman-working-office-revenue-finance-growth.webp","contentUrl":"https:\/\/cbqaglobal.com\/wp-content\/uploads\/2026\/10\/Resize_Thumbnail_businessman-working-office-revenue-finance-growth.webp","width":1080,"height":559,"caption":"SOC 2 Type 1 berfokus pada desain kontrol pada suatu titik waktu, sedangkan SOC 2 Type 2 mengevaluasi desain dan operating effectiveness selama periode tertentu."},{"@type":"BreadcrumbList","@id":"https:\/\/cbqaglobal.com\/id\/blog\/2026\/10\/01\/soc-2-type-1-vs-type-2\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/cbqaglobal.com\/"},{"@type":"ListItem","position":2,"name":"SOC 2 Type 1 vs Type 2: Memahami Perbedaan dan Cara Memilihnya"}]},{"@type":"WebSite","@id":"https:\/\/cbqaglobal.com\/#website","url":"https:\/\/cbqaglobal.com\/","name":"cbqaglobal.com","description":"","publisher":{"@id":"https:\/\/cbqaglobal.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cbqaglobal.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"id"},{"@type":"Organization","@id":"https:\/\/cbqaglobal.com\/#organization","name":"cbqaglobal.com","url":"https:\/\/cbqaglobal.com\/","logo":{"@type":"ImageObject","inLanguage":"id","@id":"https:\/\/cbqaglobal.com\/#\/schema\/logo\/image\/","url":"https:\/\/cbqaglobal.com\/wp-content\/uploads\/2026\/04\/1-Logo-CBQA-Global-scaled.png","contentUrl":"https:\/\/cbqaglobal.com\/wp-content\/uploads\/2026\/04\/1-Logo-CBQA-Global-scaled.png","width":2560,"height":1810,"caption":"cbqaglobal.com"},"image":{"@id":"https:\/\/cbqaglobal.com\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/cbqaglobal.com\/#\/schema\/person\/85b0d169c5b4dd2858125fc38186f054","name":"CBQA Global","image":{"@type":"ImageObject","inLanguage":"id","@id":"https:\/\/secure.gravatar.com\/avatar\/6c9bbd2abed8c8a68bcef6da0b8f6aa4139bffd9ac8cb7c0c5d90bb73f3e3ac0?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/6c9bbd2abed8c8a68bcef6da0b8f6aa4139bffd9ac8cb7c0c5d90bb73f3e3ac0?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/6c9bbd2abed8c8a68bcef6da0b8f6aa4139bffd9ac8cb7c0c5d90bb73f3e3ac0?s=96&d=mm&r=g","caption":"CBQA Global"},"url":"https:\/\/cbqaglobal.com\/id\/blog\/author\/rizkyamanda\/"}]}},"_links":{"self":[{"href":"https:\/\/cbqaglobal.com\/id\/wp-json\/wp\/v2\/posts\/14655","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cbqaglobal.com\/id\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cbqaglobal.com\/id\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cbqaglobal.com\/id\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/cbqaglobal.com\/id\/wp-json\/wp\/v2\/comments?post=14655"}],"version-history":[{"count":1,"href":"https:\/\/cbqaglobal.com\/id\/wp-json\/wp\/v2\/posts\/14655\/revisions"}],"predecessor-version":[{"id":14658,"href":"https:\/\/cbqaglobal.com\/id\/wp-json\/wp\/v2\/posts\/14655\/revisions\/14658"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cbqaglobal.com\/id\/wp-json\/wp\/v2\/media\/14656"}],"wp:attachment":[{"href":"https:\/\/cbqaglobal.com\/id\/wp-json\/wp\/v2\/media?parent=14655"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cbqaglobal.com\/id\/wp-json\/wp\/v2\/categories?post=14655"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cbqaglobal.com\/id\/wp-json\/wp\/v2\/tags?post=14655"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}