Skip to Content

 Risk Assessment

SOC 2 Assessment of Changes (Principle 9) (CC3.4)

Overview:The entity identifies and assesses changes that could significantly impact the system of internal control. Action Items:1) Create a vendor management policy and related procedures and publish to the company intranet for employees to access.2... Read More

SOC 2 Assessment of Fraud Risks (Principle 8) (CC3.3)

Overview:The entity considers the potential for fraud in assessing risks to the achievement of objectives. Action Items:1) Create a risk assessment policy and related procedures that outlines the organization's risk assessment approach and... Read More

SOC 2 Assessment of Risks (Principle 6) (CC3.1)

Overview:The entity specifies objectives with sufficient clarity to enable the identification and assessment of risks relating to objectives. Action Items:1) Create a risk assessment policy and related procedures that outlines the organization's... Read More

SOC 2 Risk Identification and Analysis (Principle 7) (CC3.2)

Overview:The entity identifies risks to the achievement of its objectives across the entity and analyzes risks as a basis for determining how the risks should be managed. Action Items:1) Create a risk assessment policy and related procedures that... Read More