You can select any combination of the 5 Trust Services Categories based on what commitments you are making to customers for your service. Typically security is in every SOC 2, the other 4 are added on as needed based on those commitments and system requirements.

Did this answer your question?