Glossary: Business Risk, Third Parties and Compliance

Compliance attestation

A formal statement or report that a vendor meets a named standard, such as a SOC 2 report, an ISO/IEC 27001 certificate or a PCI DSS AOC. The strongest come from independent auditors, and customers read them instead of auditing every vendor themselves.