Definition
AICPA TSC · TSP section 100 (2017, revised points of focus 2022)The control criteria a SOC 2 report is written against, published by the AICPA's Assurance Services Executive Committee. There are five categories: security (the common criteria, CC1 to CC9, which every report includes), availability, processing integrity, confidentiality and privacy. Each criterion has points of focus that guide, but do not dictate, the controls you need; the 2022 revision updated the points of focus without changing the criteria.
Also called TSCtrust services principles (the pre-2017 name)