{"id":18234,"date":"2025-03-24T12:49:48","date_gmt":"2025-03-24T11:49:48","guid":{"rendered":"https:\/\/compleye.io\/?p=18234"},"modified":"2025-03-24T12:49:48","modified_gmt":"2025-03-24T11:49:48","slug":"soc-2-quem","status":"publish","type":"post","link":"https:\/\/compleye.io\/de\/artikel\/soc-2-quem\/","title":{"rendered":"SOC 2, quem?"},"content":{"rendered":"

<\/p>\n\n\n<\/p>\n

Hoje \u00e9 um \u00f3timo dia para abrevia\u00e7\u00f5es, n\u00e3o acha? \u00d3timo, vamos l\u00e1. O Instituto Americano de Contabilistas P\u00fablicos Certificados (AICPA) introduziu o Sistema e Controlos Organizacionais (SOC). Este \u00e9 o nome de um dos requisitos de conformidade mais comuns que as empresas (tecnol\u00f3gicas) devem cumprir atualmente com base nos Crit\u00e9rios de Servi\u00e7os de Confian\u00e7a (TSC). Ent\u00e3o, o que \u00e9 o <\/strong>SOC 2? <\/b>Voc\u00ea ainda est\u00e1 seguindo?<\/strong><\/p>\n

\n\n\n\n<\/p>\n

OSOC 2 n\u00e3o \u00e9 uma lista prescritiva de controlos, ferramentas ou processos. Pelo contr\u00e1rio, cita os crit\u00e9rios necess\u00e1rios para manter uma seguran\u00e7a robusta da informa\u00e7\u00e3o, permitindo que cada empresa adopte as pr\u00e1ticas e processos relevantes para os seus pr\u00f3prios objectivos e opera\u00e7\u00f5es.<\/p>

\n

\n\n\n\n<\/p>\n

Tanto o SOC 2 como a ISO – lembra-se dessa? – s\u00e3o normas reconhecidas internacionalmente que envolvem uma auditoria independente efectuada por uma terceira parte. A diferen\u00e7a entre a ISO 27001 e o SOC 2<\/a> \u00e9 que o SOC 2 \u00e9 usado principalmente nos EUA e n\u00e3o resulta em uma certifica\u00e7\u00e3o, mas em um relat\u00f3rio de atestado.  <\/p>\n

Uma empresa licenciada pela CPA valida que os controlos internos gerais relacionados com os sistemas de informa\u00e7\u00e3o est\u00e3o em vigor para garantir o servi\u00e7o que presta aos seus clientes.<\/p>\n

\n\n\n\n<\/p>\n

Os Crit\u00e9rios dos Servi\u00e7os de Confian\u00e7a<\/strong><\/h2>\n

\n\n\n\n<\/p>\n

Os requisitos baseiam-se em cinco TSC. Esses crit\u00e9rios s\u00e3o seguran\u00e7a, disponibilidade, integridade de processamento, confidencialidade e privacidade. Confira-os:<\/p>\n

\n\n\n\n<\/p>\n

    \n
  • Seguran\u00e7a<\/strong> refere-se \u00e0 prote\u00e7\u00e3o da informa\u00e7\u00e3o e dos sistemas contra o acesso n\u00e3o autorizado.<\/li>\n
  • Disponibilidade<\/strong> refere-se ao facto de a infraestrutura, o software ou a informa\u00e7\u00e3o serem mantidos e disporem de controlos de funcionamento, monitoriza\u00e7\u00e3o e manuten\u00e7\u00e3o.<\/li>\n
  • Integridade de processamento<\/strong> garante que os sistemas desempenham as suas fun\u00e7\u00f5es como previsto. Al\u00e9m disso, que est\u00e3o isentos de erros, atrasos, omiss\u00f5es e manipula\u00e7\u00f5es n\u00e3o autorizadas ou inadvertidas.<\/li>\n
  • Confidencialidade<\/strong> diz respeito \u00e0 capacidade da empresa para proteger os dados. Deve ser restringida a um conjunto espec\u00edfico de pessoas ou organiza\u00e7\u00f5es.<\/li>\n
  • Privacidade<\/strong>: os crit\u00e9rios referem-se \u00e0 capacidade de uma organiza\u00e7\u00e3o para proteger as informa\u00e7\u00f5es de identifica\u00e7\u00e3o pessoal contra o acesso n\u00e3o autorizado.<\/li>\n<\/ul>\n

    \n\n\n\n<\/p>\n

      <\/ul>\n

      \n\n\n\n<\/p>\n

      A quem se aplica o SOC 2?<\/strong><\/h3>\n

      \n\n\n\n<\/p>\n

      Aplica-se a qualquer fornecedor de servi\u00e7os tecnol\u00f3gicos ou empresa SaaS que trate ou armazene dados de clientes. Os fornecedores terceiros, outros parceiros ou organiza\u00e7\u00f5es de apoio que trabalham com essas organiza\u00e7\u00f5es, tamb\u00e9m devem manter esta conformidade para garantir a integridade dos seus sistemas de dados e salvaguardas.<\/p>\n

      \n\n\n\n<\/p>\n

      Por que deveriam? Bem, para al\u00e9m de SOC 2 ser uma excelente palavra de rima, \u00e9 uma forma incr\u00edvel de as organiza\u00e7\u00f5es mostrarem aos clientes e a outras partes interessadas que se preocupam com a seguran\u00e7a dos seus dados. Requisitos rigorosos de conformidade s\u00e3o postos \u00e0 prova na auditoria no local. <\/p>\n

      Eles garantem, nomeadamente, que as informa\u00e7\u00f5es sens\u00edveis est\u00e3o a ser tratadas de forma respons\u00e1vel. Isto \u00e9 suscet\u00edvel de dar \u00e0s organiza\u00e7\u00f5es uma vantagem competitiva. Estar em conformidade garante aos outros que eles t\u00eam a infraestrutura, ferramentas e processos para proteger suas informa\u00e7\u00f5es contra acesso n\u00e3o autorizado.<\/p>

      \n

      \n\n\n\n<\/p>\n

      O que tamb\u00e9m \u00e9 digno de nota \u00e9 que as organiza\u00e7\u00f5es (que implementam os controlos necess\u00e1rios) s\u00e3o menos propensas a sofrer viola\u00e7\u00f5es de dados ou a violar a privacidade dos utilizadores. Isto protege-as de efeitos negativos, tais como ac\u00e7\u00f5es regulamentares e danos financeiros ou de reputa\u00e7\u00e3o. Todos ganham, certo? <\/p>\n

      \n\n\n\n<\/p>\n

      Para resumir o que foi dito acima, na pr\u00e1tica, se voc\u00ea tem uma conformidade SOC 2, voc\u00ea sabe que sua organiza\u00e7\u00e3o mant\u00e9m um alto n\u00edvel de seguran\u00e7a da informa\u00e7\u00e3o. Isso tem muitas vantagens contra nenhuma desvantagem, o que \u00e9 uma \u00f3tima maneira de encerrar este caso. woohoo!<\/p>\n

      \n\n\n

      <\/p>","protected":false},"excerpt":{"rendered":"

      Hoje \u00e9 um \u00f3timo dia para abreviaturas, n\u00e3o acha? \u00d3timo, vamos l\u00e1. O Instituto Americano de Contabilistas P\u00fablicos Certificados (AICPA) introduziu o Sistema e Controlos Organizacionais (SOC). Este \u00e9 o nome de um dos requisitos de conformidade mais comuns que as empresas (tecnol\u00f3gicas) devem cumprir atualmente com base no Trust […]<\/p>","protected":false},"author":17,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[111,118],"class_list":["post-18234","post","type-post","status-publish","format-standard","hentry","category-lean","tag-compleye-orig","tag-portuguese"],"yoast_head":"\nLean Compliance Collaboration Platform | Compleye.io | ISO 27001 | ISO 9001 | SOC 2<\/title>\n<meta name=\"description\" content=\"Lean Compliance Collaboration Platform to help SaaS Companies towards their ISO 27001, ISO 9001 or SOC-2 certification and stronger performance on privacy and security.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/compleye.io\/de\/artikel\/soc-2-quem\/\" \/>\n<meta property=\"og:locale\" content=\"de_DE\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Lean Compliance Collaboration Platform | Compleye.io | ISO 27001 | ISO 9001 | SOC 2\" \/>\n<meta property=\"og:description\" content=\"Lean Compliance Collaboration Platform to help SaaS Companies towards their ISO 27001, ISO 9001 or SOC-2 certification and stronger performance on privacy and security.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/compleye.io\/de\/artikel\/soc-2-quem\/\" \/>\n<meta property=\"og:site_name\" content=\"compleye.io\" \/>\n<meta property=\"article:published_time\" content=\"2025-03-24T11:49:48+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/compleye.io\/wp-content\/uploads\/2021\/06\/Tablet3.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1084\" \/>\n\t<meta property=\"og:image:height\" content=\"633\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Karolin Kruiskamp\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Geschrieben von\" \/>\n\t<meta name=\"twitter:data1\" content=\"Karolin Kruiskamp\" \/>\n\t<meta name=\"twitter:label2\" content=\"Gesch\u00e4tzte Lesezeit\" \/>\n\t<meta name=\"twitter:data2\" content=\"3\u00a0Minuten\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":[\"Article\",\"BlogPosting\"],\"@id\":\"https:\\\/\\\/compleye.io\\\/articles\\\/soc-2-quem\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/compleye.io\\\/articles\\\/soc-2-quem\\\/\"},\"author\":{\"name\":\"Karolin Kruiskamp\",\"@id\":\"https:\\\/\\\/compleye.io\\\/#\\\/schema\\\/person\\\/0cec6d61467336a3c2ea74f0beb84bc3\"},\"headline\":\"SOC 2, quem?\",\"datePublished\":\"2025-03-24T11:49:48+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/compleye.io\\\/articles\\\/soc-2-quem\\\/\"},\"wordCount\":639,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/compleye.io\\\/#organization\"},\"keywords\":[\"compleye.orig\",\"portuguese\"],\"articleSection\":[\"Compleye Lean Compliance Designers\"],\"inLanguage\":\"de\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/compleye.io\\\/articles\\\/soc-2-quem\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/compleye.io\\\/articles\\\/soc-2-quem\\\/\",\"url\":\"https:\\\/\\\/compleye.io\\\/articles\\\/soc-2-quem\\\/\",\"name\":\"Lean Compliance Collaboration Platform | Compleye.io | ISO 27001 | ISO 9001 | SOC 2\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/compleye.io\\\/#website\"},\"datePublished\":\"2025-03-24T11:49:48+00:00\",\"description\":\"Lean Compliance Collaboration Platform to help SaaS Companies towards their ISO 27001, ISO 9001 or SOC-2 certification and stronger performance on privacy and security.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/compleye.io\\\/articles\\\/soc-2-quem\\\/#breadcrumb\"},\"inLanguage\":\"de\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/compleye.io\\\/articles\\\/soc-2-quem\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/compleye.io\\\/articles\\\/soc-2-quem\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/compleye.io\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"SOC 2, quem?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/compleye.io\\\/#website\",\"url\":\"https:\\\/\\\/compleye.io\\\/\",\"name\":\"compleye.io\",\"description\":\"security and privacy compliance getting done\",\"publisher\":{\"@id\":\"https:\\\/\\\/compleye.io\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/compleye.io\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"de\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/compleye.io\\\/#organization\",\"name\":\"Compleye\",\"url\":\"https:\\\/\\\/compleye.io\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"de\",\"@id\":\"https:\\\/\\\/compleye.io\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/compleye.io\\\/wp-content\\\/uploads\\\/2023\\\/03\\\/Compleye_Logo_Logo_Black.png\",\"contentUrl\":\"https:\\\/\\\/compleye.io\\\/wp-content\\\/uploads\\\/2023\\\/03\\\/Compleye_Logo_Logo_Black.png\",\"width\":2451,\"height\":892,\"caption\":\"Compleye\"},\"image\":{\"@id\":\"https:\\\/\\\/compleye.io\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/company\\\/c-board\\\/\",\"https:\\\/\\\/www.youtube.com\\\/channel\\\/UCpe1Z7aynfqWSrjgJORgKXw\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/compleye.io\\\/#\\\/schema\\\/person\\\/0cec6d61467336a3c2ea74f0beb84bc3\",\"name\":\"Karolin Kruiskamp\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"de\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/e9c574805c26ff058e494916fb42a856824ea78280afec8044becfcbddce78c7?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/e9c574805c26ff058e494916fb42a856824ea78280afec8044becfcbddce78c7?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/e9c574805c26ff058e494916fb42a856824ea78280afec8044becfcbddce78c7?s=96&d=mm&r=g\",\"caption\":\"Karolin Kruiskamp\"},\"url\":\"https:\\\/\\\/compleye.io\\\/de\\\/articles\\\/author\\\/karolin\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Lean Compliance Collaboration Platform | Compleye.io | ISO 27001 | ISO 9001 | SOC 2","description":"Lean Compliance Collaboration Platform to help SaaS Companies towards their ISO 27001, ISO 9001 or SOC-2 certification and stronger performance on privacy and security.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/compleye.io\/de\/artikel\/soc-2-quem\/","og_locale":"de_DE","og_type":"article","og_title":"Lean Compliance Collaboration Platform | Compleye.io | ISO 27001 | ISO 9001 | SOC 2","og_description":"Lean Compliance Collaboration Platform to help SaaS Companies towards their ISO 27001, ISO 9001 or SOC-2 certification and stronger performance on privacy and security.","og_url":"https:\/\/compleye.io\/de\/artikel\/soc-2-quem\/","og_site_name":"compleye.io","article_published_time":"2025-03-24T11:49:48+00:00","og_image":[{"width":1084,"height":633,"url":"https:\/\/compleye.io\/wp-content\/uploads\/2021\/06\/Tablet3.png","type":"image\/png"}],"author":"Karolin Kruiskamp","twitter_card":"summary_large_image","twitter_misc":{"Geschrieben von":"Karolin Kruiskamp","Gesch\u00e4tzte Lesezeit":"3\u00a0Minuten"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":["Article","BlogPosting"],"@id":"https:\/\/compleye.io\/articles\/soc-2-quem\/#article","isPartOf":{"@id":"https:\/\/compleye.io\/articles\/soc-2-quem\/"},"author":{"name":"Karolin Kruiskamp","@id":"https:\/\/compleye.io\/#\/schema\/person\/0cec6d61467336a3c2ea74f0beb84bc3"},"headline":"SOC 2, quem?","datePublished":"2025-03-24T11:49:48+00:00","mainEntityOfPage":{"@id":"https:\/\/compleye.io\/articles\/soc-2-quem\/"},"wordCount":639,"commentCount":0,"publisher":{"@id":"https:\/\/compleye.io\/#organization"},"keywords":["compleye.orig","portuguese"],"articleSection":["Compleye Lean Compliance Designers"],"inLanguage":"de","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/compleye.io\/articles\/soc-2-quem\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/compleye.io\/articles\/soc-2-quem\/","url":"https:\/\/compleye.io\/articles\/soc-2-quem\/","name":"Lean Compliance Collaboration Platform | Compleye.io | ISO 27001 | ISO 9001 | SOC 2","isPartOf":{"@id":"https:\/\/compleye.io\/#website"},"datePublished":"2025-03-24T11:49:48+00:00","description":"Lean Compliance Collaboration Platform to help SaaS Companies towards their ISO 27001, ISO 9001 or SOC-2 certification and stronger performance on privacy and security.","breadcrumb":{"@id":"https:\/\/compleye.io\/articles\/soc-2-quem\/#breadcrumb"},"inLanguage":"de","potentialAction":[{"@type":"ReadAction","target":["https:\/\/compleye.io\/articles\/soc-2-quem\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/compleye.io\/articles\/soc-2-quem\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/compleye.io\/"},{"@type":"ListItem","position":2,"name":"SOC 2, quem?"}]},{"@type":"WebSite","@id":"https:\/\/compleye.io\/#website","url":"https:\/\/compleye.io\/","name":"compleye.io","description":"security and privacy compliance getting done","publisher":{"@id":"https:\/\/compleye.io\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/compleye.io\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"de"},{"@type":"Organization","@id":"https:\/\/compleye.io\/#organization","name":"Compleye","url":"https:\/\/compleye.io\/","logo":{"@type":"ImageObject","inLanguage":"de","@id":"https:\/\/compleye.io\/#\/schema\/logo\/image\/","url":"https:\/\/compleye.io\/wp-content\/uploads\/2023\/03\/Compleye_Logo_Logo_Black.png","contentUrl":"https:\/\/compleye.io\/wp-content\/uploads\/2023\/03\/Compleye_Logo_Logo_Black.png","width":2451,"height":892,"caption":"Compleye"},"image":{"@id":"https:\/\/compleye.io\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.linkedin.com\/company\/c-board\/","https:\/\/www.youtube.com\/channel\/UCpe1Z7aynfqWSrjgJORgKXw"]},{"@type":"Person","@id":"https:\/\/compleye.io\/#\/schema\/person\/0cec6d61467336a3c2ea74f0beb84bc3","name":"Karolin Kruiskamp","image":{"@type":"ImageObject","inLanguage":"de","@id":"https:\/\/secure.gravatar.com\/avatar\/e9c574805c26ff058e494916fb42a856824ea78280afec8044becfcbddce78c7?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/e9c574805c26ff058e494916fb42a856824ea78280afec8044becfcbddce78c7?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/e9c574805c26ff058e494916fb42a856824ea78280afec8044becfcbddce78c7?s=96&d=mm&r=g","caption":"Karolin Kruiskamp"},"url":"https:\/\/compleye.io\/de\/articles\/author\/karolin\/"}]}},"_links":{"self":[{"href":"https:\/\/compleye.io\/de\/wp-json\/wp\/v2\/posts\/18234","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/compleye.io\/de\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/compleye.io\/de\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/compleye.io\/de\/wp-json\/wp\/v2\/users\/17"}],"replies":[{"embeddable":true,"href":"https:\/\/compleye.io\/de\/wp-json\/wp\/v2\/comments?post=18234"}],"version-history":[{"count":1,"href":"https:\/\/compleye.io\/de\/wp-json\/wp\/v2\/posts\/18234\/revisions"}],"predecessor-version":[{"id":18297,"href":"https:\/\/compleye.io\/de\/wp-json\/wp\/v2\/posts\/18234\/revisions\/18297"}],"wp:attachment":[{"href":"https:\/\/compleye.io\/de\/wp-json\/wp\/v2\/media?parent=18234"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/compleye.io\/de\/wp-json\/wp\/v2\/categories?post=18234"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/compleye.io\/de\/wp-json\/wp\/v2\/tags?post=18234"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}