Skip to main content

Repository → 💼 SOC 2

💼 CC5 Control Activities

  • ID: /frameworks/soc-2/cc5

Description

Empty...

Similar

  • Internal
    • ID: dec-b-e3d8a7e0

Sub Sections

SectionSub SectionsInternal RulesPoliciesFlagsCompliance
💼 CC5.1 The entity selects and develops control activities that contribute\ \ to the mitigation of risks to the achievement of objectives to acceptable levels.6no data
 💼 CC5.1-1 Integrates With Risk Assessmentno data
 💼 CC5.1-2 Considers Entity-Specific Factorsno data
 💼 CC5.1-3 Determines Relevant Business Processesno data
 💼 CC5.1-4 Evaluates a Mix of Control Activity Typesno data
 💼 CC5.1-5 Considers at What Level Activities Are Appliedno data
 💼 CC5.1-6 Addresses Segregation of Dutiesno data
💼 CC5.2 The entity also selects and develops general control activities over\ \ technology to support the achievement of objectives.41540no data
 💼 CC5.2-1 Determines Dependency Between the Use of Technology in Business Processes and Technology General Controls1no data
 💼 CC5.2-2 Establishes Relevant Technology Infrastructure Control Activities7no data
 💼 CC5.2-3 Establishes Relevant Security Management Process Controls Activities1535no data
 💼 CC5.2-4 Establishes Relevant Technology Acquisition, Development, and Maintenance Process Control Activities1no data
💼 CC5.3 The entity deploys control activities through policies that establish\ \ what is expected and in procedures that put policies into action.6no data
 💼 CC5.3-1 Establishes Policies and Procedures to Support Deployment of\ \ Management's Directivesno data
 💼 CC5.3-2 Establishes Responsibility and Accountability for Executing Policies and Proceduresno data
 💼 CC5.3-3 Performs in a Timely Mannerno data
 💼 CC5.3-4 Takes Corrective Actionno data
 💼 CC5.3-5 Performs Using Competent Personnelno data
 💼 CC5.3-6 Reassesses Policies and Proceduresno data