Trust Services Criteria (TSC)
The AICPA framework of five criteria (Security, Availability, Processing Integrity, Confidentiality, Privacy) that a SOC 2 report evaluates against.
The Trust Services Criteria, maintained by the AICPA, define the control categories a SOC 2 engagement reports on. Security is required; the other four are optional and selected based on commitments to customers. The 2017 TSC was last revised with points of focus added in 2022.