SOC 2 offers a Type 1 and Type 2 report. The Type 1 report is a point-in-time snapshot of your organization’s controls, validated by tests to determine if those controls are working appropriately. The Type 2 report looks at the effectiveness of those same controls over an extended period of time - usually 6-12 months. A Type 2 report is the most common report organizations look to achieve to demonstrate they continue to maintain their SOC 2 compliance program.