Ongoing and separate evaluations
Summary
The entity selects, develops, and performs ongoing and/or separate evaluations to ascertain whether the components of internal control are present and functioning.
monitoringinternal auditcontrol testing
Read the full official text: https://www.aicpa-cima.com/resources/download/2022-trust-services-criteria
← Criterion CC3.4
Identifying and assessing changes
Criterion CC4.2 →
Evaluating and communicating deficiencies
Track SOC 2 criterion CC4.1 as evidence
eurocompliant maps this obligation to a checklist task and the evidence that satisfies it, alongside every other framework you follow.
Start free trial