SOC 2 criteria › CC5 Control activities
SOC 2 CC5.1 explained
Control activities are selected and developed to reduce risks to acceptable levels.
Typical controls that address CC5.1
- Controls mapped to risks
- Control matrix
Evidence auditors usually ask for
- Risk-to-control mapping
- Control matrix
Keep CC5.1 evidence organised
Korrali Trust keeps your policies, controls and evidence in one workspace, and reuses them to answer customer security questionnaires.
Other CC5 criteria
Plain-English summary of the 2017 Trust Services Criteria common criteria. Controls and evidence vary by organisation and auditor.