General controls over technology
Summary
The entity also selects and develops general control activities over technology to support the achievement of objectives.
control activitiesgeneral it controls
Read the full official text: https://www.aicpa-cima.com/resources/download/2022-trust-services-criteria
← Criterion CC5.1
Control activities mitigating risk
Criterion CC5.3 →
Deployment through policies and procedures
Track SOC 2 criterion CC5.2 as evidence
eurocompliant maps this obligation to a checklist task and the evidence that satisfies it, alongside every other framework you follow.
Start free trial