article thumbnail

Audit Checklist for SOC 2

Reciprocity

Risk assessment. Change management. Risk mitigation. Vendor management programs. Risk management processes and internal corporate governance. Communication and information. Monitoring activities. Control activities – which are further broken out by: Logical and physical access.

Audit 52