SOC Report and SOC Assessment. SOC is System and Organization Controls or Service Organization controls. SOC is governed by the AICPA. 1st Secure Compliance services SOC 1 Internal Controls over Financial Reporting (ICFR), SOC 2 Trust Services Criteria (TSC), SOC 3 and SOC for Cybersecurity.