Include the timing of each change in the audit assertion's in scope system description.

CONTROL ID
14892

CONTROL TYPE
Establish/Maintain Documentation

CLASSIFICATION
Preventive

This Control directly supports the implied Control(s):

Establish, implement, and maintain an in scope system description., CC ID: 14873

There are no implementation support Controls.

When performing the SOC 2Â® examination, the service auditor should also obtain an understanding of changes in the service organization's system implemented during the period covered by the examination. If the service auditor believes that the changes would be considered significant by the broad ran… (¶ 3.62, Reporting on Controls at a Service Organization: Relevant to Security, Availability, Processing Integrity, Confidentiality, or Privacy (SOC2), current as of January 1, 2018)
If the service auditor believes that the changes would be considered significant by the broad range of report users, those changes would generally be included in the description. The narrative discussing the change would be expected to contain an appropriate level of detail, including the date the c… (¶ 3.75, SOC 2Â® Reporting on an Examination of Controls at a Service Organization Relevant to Security, Availability, Processing Integrity, Confidentiality, or Privacy, October 15, 2022)