article thumbnail

Audit Checklist for SOC 2

Reciprocity

Change management. Risk mitigation. Vendor management programs. Risk management processes and internal corporate governance. Risk assessment. Monitoring activities. Control activities – which are further broken out by: Logical and physical access. System operational effectiveness.

Audit 52