Criterion A1.2The entity authorizes, designs, develops or acquires, implements, operates, approves, maintains, and monitors environmental protections, software, data backup processes, and recovery infrastructure to meet its objectives.
What it says
The entity authorizes, designs, develops or acquires, implements, operates, approves, maintains, and monitors environmental protections, software, data backup processes, and recovery infrastructure to meet its objectives.
SOC 2, the trust services criteria, A1.2
What is in the packs for this
Each one helps with this requirement.
- Excel
Trust Services Criteria Response Register
in SOC 2 Report ReadinessThe register has a row for this criterion, for you to write down your own controls, owners and evidence against it. Lists the 61 Trust Services Criteria by number and series title, with blank columns for your own controls, owners and evidence. It makes no coverage claim. - Word
Business Continuity & ICT Resilience Policy
in Business Continuity, Disaster Recovery & Cyber ResilienceIts Framework References cite this criterion. Commits the organisation to continuity and recovery objectives; the resilience domain's single policy. - Word
IT Disaster Recovery Procedure
in Business Continuity, Disaster Recovery & Cyber ResilienceIts Framework References cite this criterion. Recovers the systems a critical service needs after a failure that is not an attack: the failover decision, each system's recovery method and runbook, and failback.
Criterion text: 2017 Trust Services Criteria (with revised points of focus, 2022). © 2022 Association of International Certified Professional Accountants. All rights reserved. COSO principles © 2019 Committee of Sponsoring Organizations of the Treadway Commission (COSO). All rights reserved. Reproduced from copies of AICPA's published text, which come from two lineages (the AICPA document in two versions, and one structured-data publisher) and agree across them; check it against AICPA's own before relying on it.