Compliancemanzill.com
System and Organization Controls (SOC) 2

System and Organization Controls (SOC) 2/CC1 Control Environment/7 of 61

CC1.2COSO Principle 2: The board of directors demonstrates independence from management and exercises oversight of the development and performance of internal control

Control family: CC1 Control Environment

Control description

The following points of focus highlight important characteristics relating to this criterion: Points of focus specified in the COSO framework.

Establishes Oversight Responsibilities — The board of directors identifies and accepts its oversight responsibilities in relation to established requirements and expectations.

• Applies Relevant Expertise — The board of directors defines, maintains, and periodically evaluates the skills and expertise needed among its members to enable

them to ask probing questions of senior management and take commensurate action.

• Operates Independently — The board of directors has sufficient members who are independent from management and objective in evaluations and decision making.

How to implement

Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.