Back

Include in scope procedures in the audit assertion's in scope system description.


CONTROL ID
16551
CONTROL TYPE
Audits and Risk Management
CLASSIFICATION
Preventive

SUPPORTING AND SUPPORTED CONTROLS



This Control directly supports the implied Control(s):
  • Establish, implement, and maintain an in scope system description., CC ID: 14873

There are no implementation support Controls.


SELECTED AUTHORITY DOCUMENTS COMPLIED WITH



  • If management's responses to identified deviations are included in the description, they are usually included in the section of the description that lists the applicable control and related criteria. In these circumstances, management's response would be considered part of the description; therefore… (¶ 4.22, SOC 2® Reporting on an Examination of Controls at a Service Organization Relevant to Security, Availability, Processing Integrity, Confidentiality, or Privacy, October 15, 2022)