New signups are temporarily closed.Existing customers can still sign in. Contact us to be notified when we reopen.
Skip to main content
SOC 2 · Criterion CC3.4

Identifying and assessing changes

Summary

The entity identifies and assesses changes that could significantly impact the system of internal control.

risk assessmentchange impact

Read the full official text: https://www.aicpa-cima.com/resources/download/2022-trust-services-criteria

Track SOC 2 criterion CC3.4 as evidence

eurocompliant maps this obligation to a checklist task and the evidence that satisfies it, alongside every other framework you follow.

Start free trial