Skip to Content

 Control Activities

SOC 2 Developing Control Activities (Principle 10) (CC5.1)

Overview: The entity selects and develops control activities that contribute to the mitigation of risks to the achievement of objectives to acceptable levels. Action Items: 1) Create a risk assessment policy and related procedures that outlines the... Read More

SOC 2 Policies and Procedures (Principle 12) (CC5.3)

Overview:The entity deploys control activities through policies that establish what is expected and in procedures that put policies into action. Action Items:1) Create an information security policy to govern the entire information security program... Read More

SOC 2 Technology Control Activities (Principle 11) (CC5.2)

Overview:The entity also selects and develops general control activities over technology to support the achievement of objectives. Action Items:1) Create a risk assessment policy and related procedures that outlines the organization's risk... Read More