← all controls
CC4.1SOC 2

Monitoring activities - ongoing and separate evaluations

The entity selects, develops, and performs ongoing and separate evaluations to determine whether controls are present and functioning.

Trust Service Criterion
CC
Audit period
type-2
Points of focus
  • Controls are tested on a defined cadence
  • Automated monitoring supports manual reviews
  • Evaluation scope covers key commitments