SOC reports - Fusion & OCI

Summary:

Hi community:

I have a customer in the middle of an external audit. Auditors are asking them the following:

Previously Oracle had only one SOC report that covered the audit of all contracted services, and this year there are two SOC reports in which Fusion and OCI are separated. Therefore, what is required is confirmation that the OCI SOC report applies to the services they have contracted  and an explanation of why they were separated.

Is there any documentation or reference that could help to clarify this matter for their auditors?

Thanks in advance!