Monitoring activities - evaluates and communicates deficiencies

The entity evaluates and communicates internal control deficiencies in a timely manner.

Trust Service Criterion

CC

Audit period

type-2

Points of focus

• Deficiencies are documented and prioritized
• Owners and deadlines are assigned
• Remediation is verified