SOC 2 criteria › CC4 Monitoring activities
SOC 2 CC4.2 explained
Control deficiencies are communicated to those responsible and fixed in time.
Typical controls that address CC4.2
- Tracking of findings to remediation
- Escalation to management
Evidence auditors usually ask for
- Issue tracker records
- Remediation evidence
Keep CC4.2 evidence organised
Korrali Trust keeps your policies, controls and evidence in one workspace, and reuses them to answer customer security questionnaires.
Other CC4 criteria
Plain-English summary of the 2017 Trust Services Criteria common criteria. Controls and evidence vary by organisation and auditor.