SOC 2 criteria › CC5 Control activities
SOC 2 CC5.2 explained
General controls over technology are selected and developed.
Typical controls that address CC5.2
- Access, change, backup and monitoring controls for systems
- Infrastructure configuration standards
Evidence auditors usually ask for
- IT general control descriptions
- Configuration baselines
Keep CC5.2 evidence organised
Korrali Trust keeps your policies, controls and evidence in one workspace, and reuses them to answer customer security questionnaires.
Other CC5 criteria
Plain-English summary of the 2017 Trust Services Criteria common criteria. Controls and evidence vary by organisation and auditor.