Thank you for the responses. You are right if it is stated in the policy and if the observation period does not cover the time period of the test, they should care the reality and if it is planned.
馃憢 Hello, team! Providing a Pentest report from the last 12 months is a must for passing SOC2 Type 1 audit?
.png)