SOC 1 (System and Organization Controls 1) is a reporting framework developed by the American Institute of Certified Public Accountants (AICPA). SOC 1 reports focus specifically on a service organization’s internal controls over financial reporting (ICFR).