Which of the following will provide a customer the opportunity to engage a third party to deliver an SOC 2, Type 1 report created by third-party assessors?

Right- to-audit clauses provide customers with the right to have an audit of their vendor like an SOC 2, Type 1 assessment performed. SOC 2, Type 1 reports are not penetration test- ing reports, vulnerability scan reports, or risk assessment reports.