Skip to main content

๐Ÿ’ผ CC1 Control Environments

  • Contextual name: ๐Ÿ’ผ CC1 Control Environments
  • ID: /frameworks/soc-2/cc1
  • Located in: ๐Ÿ’ผ SOC 2

Descriptionโ€‹

Empty...

Similarโ€‹

  • Internal
    • ID: dec-b-fbc0a91d

Sub Sectionsโ€‹

SectionSub SectionsInternal RulesPoliciesFlags
๐Ÿ’ผ CC1.1 The entity demonstrates a commitment to integrity and ethical values.5
ย ย ย ย ๐Ÿ’ผ CC1.1-1 Considers Contractors and Vendor Employees in Demonstrating Its Commitment
ย ย ย ย ๐Ÿ’ผ CC1.1-2 Sets the Tone at the Top
ย ย ย ย ๐Ÿ’ผ CC1.1-3 Evaluates Adherence to Standards of Conduct
ย ย ย ย ๐Ÿ’ผ CC1.1-4 Establishes Standards of Conduct
ย ย ย ย ๐Ÿ’ผ CC1.1-5 Addresses Deviations in a Timely Manner
๐Ÿ’ผ CC1.2 The board of directors demonstrates independence from management and\ \ exercises oversight of the development and performance of internal control.4
ย ย ย ย ๐Ÿ’ผ CC1.2-1 Establishes Oversight Responsibilities
ย ย ย ย ๐Ÿ’ผ CC1.2-2 Applies Relevant Expertise
ย ย ย ย ๐Ÿ’ผ CC1.2-3 Operates Independently
ย ย ย ย ๐Ÿ’ผ CC1.2-4 Supplements Board Expertise
๐Ÿ’ผ CC1.3 Management establishes, with board oversight, structures, reporting lines,\ \ and appropriate authorities and responsibilities in the pursuit of objectives.5
ย ย ย ย ๐Ÿ’ผ CC1.3-1 Considers All Structures of the Entity
ย ย ย ย ๐Ÿ’ผ CC1.3-2 Establishes Reporting Lines
ย ย ย ย ๐Ÿ’ผ CC1.3-3 Defines, Assigns, and Limits Authorities and Responsibilities
ย ย ย ย ๐Ÿ’ผ CC1.3-4 Addresses Specific Requirements When Defining Authorities and Responsibilities
ย ย ย ย ๐Ÿ’ผ CC1.3-5 Considers Interactions With External Parties When Establishing Structures, Reporting Lines, Authorities, and Responsibilities
๐Ÿ’ผ CC1.4 The entity demonstrates a commitment to attract, develop, and retain\ \ competent individuals in alignment with objectives.7
ย ย ย ย ๐Ÿ’ผ CC1.4-1 Establishes Policies and Practices
ย ย ย ย ๐Ÿ’ผ CC1.4-2 Evaluates Competence and Addresses Shortcomings
ย ย ย ย ๐Ÿ’ผ CC1.4-3 Attracts, Develops, and Retains Individuals
ย ย ย ย ๐Ÿ’ผ CC1.4-4 Plans and Prepares for Succession
ย ย ย ย ๐Ÿ’ผ CC1.4-5 Considers the Background of Individuals
ย ย ย ย ๐Ÿ’ผ CC1.4-6 Considers the Technical Competency of Individuals
ย ย ย ย ๐Ÿ’ผ CC1.4-7 Provides Training to Maintain Technical Competencies
๐Ÿ’ผ CC1.5 The entity holds individuals accountable for their internal control\ \ responsibilities in the pursuit of objectives.5
ย ย ย ย ๐Ÿ’ผ CC1.5-1 Enforces Accountability Through Structures, Authorities, and Responsibilities
ย ย ย ย ๐Ÿ’ผ CC1.5-2 Establishes Performance Measures, Incentives, and Rewards
ย ย ย ย ๐Ÿ’ผ CC1.5-3 Evaluates Performance Measures, Incentives, and Rewards for Ongoing Relevance
ย ย ย ย ๐Ÿ’ผ CC1.5-4 Considers Excessive Pressures
ย ย ย ย ๐Ÿ’ผ CC1.5-5 Evaluates Performance and Rewards or Disciplines Individuals