SOC 2 Control Activities

Select, develop, and deploy control activities, including general controls over technology, through policies and procedures.

CC5.1 Selection and Development of Control Activities

The entity selects and develops control activities that contribute to the mitigation of risks to the achievement of objectives to acceptable levels.
CC5.2 General Control Activities Over Technology

The entity also selects and develops general control activities over technology to support the achievement of objectives.
CC5.3 Deployment Through Policies and Procedures

The entity deploys control activities through policies that establish what is expected and in procedures that put policies into action.

Need help putting this into practice? See our SOC 2 compliance services.

See LakeRidge in action.

Talk with our team about your framework, your gaps, and the right plan.