Back

Establish, implement, and maintain error handling procedures for the sale of products and services.


CONTROL ID
13488
CONTROL TYPE
Establish/Maintain Documentation
CLASSIFICATION
Preventive

SUPPORTING AND SUPPORTED CONTROLS



This Control directly supports the implied Control(s):
  • Acquisition or sale of facilities, technology, and services, CC ID: 01123

There are no implementation support Controls.


SELECTED AUTHORITY DOCUMENTS COMPLIED WITH



  • The entity establishes exception handling procedures for service or product issues related to vendors and business partners. (CC9.2 ¶ 3 Bullet 6 Establishes Exception Handling Procedures From Vendors and Business Partners, 2017 Trust Services Criteria for Security, Availability, Processing Integrity, Confidentiality, and Privacy (with Revised Points of Focus – 2022))
  • Establishing exception handling procedures for service or product issues related to vendors and business partners (¶ 3.150 Bullet 5, Reporting on Controls at a Service Organization: Relevant to Security, Availability, Processing Integrity, Confidentiality, or Privacy (SOC2), current as of January 1, 2018)
  • Establishing exception handling procedures for service or product issues related to vendors and business partners. (¶ 3.164 Bullet 6, SOC 2® Reporting on an Examination of Controls at a Service Organization Relevant to Security, Availability, Processing Integrity, Confidentiality, or Privacy, October 15, 2022)
  • The entity establishes exception handling procedures for service or product issues related to vendors and business partners. (CC9.2 Establishes Exception Handling Procedures From Vendors and Business Partners, Trust Services Criteria)
  • The entity establishes exception handling procedures for service or product issues related to vendors and business partners. (CC9.2 ¶ 2 Bullet 5 Establishes Exception Handling Procedures From Vendors and Business Partners, Trust Services Criteria, (includes March 2020 updates))