Ensure that AOC staff responsible for evaluating SOC 1® reports adequately understand the impact of controls performed by subservice organizations on AOC’s financial systems and consider whether the absence of SOC 1® testing of these controls requires implementation of additional Complementary User Entity Controls (CUEC).