Glossary

What is Complementary User Entity Controls (CUECs)?

The section of a vendor's SOC 2 report listing the controls the vendor expects you to operate for their attestation to hold — the homework almost nobody reads. Reviewing CUECs is the difference between collecting SOC 2 reports and actually using them.