Representational State Transfer (REST) uses TLS for communication over secured channels.
Although REST also supports SSL, at this point SSL has been phased out due to vulnerabilities and has been replaced by TLS.

Explanation
All of these activities should incorporate encryption, except for profile formatting, which is a made-up term.

Explanation
Under the SOC guidelines, when any of the four principles other than security are being audited, which includes availability, confidentiality, processing integrity, and privacy, the security principle must also be included with the audit.

Explanation/Reference:
Explanation:
Regardless of which cloud-hosting model is used, the cloud provider always has sole responsibility for the physical environment.

Explanation
In order to obtain and comply with certifications, independent external audits must be performed and satisfied.
Although some testing of certification controls can be part of an internal audit, they will not satisfy requirements.