Criterion CC9.2The entity assesses and manages risks associated with vendors and business partners.
What it says
The entity assesses and manages risks associated with vendors and business partners.
SOC 2, the trust services criteria, CC9.2
What is in the packs for this
From SOC 2 Report Readiness. Each one helps with this requirement.
- Word
System Description & Boundary Template
Its Framework References cite this criterion. Template for the system description a SOC 2 report contains: services, commitments, components, boundary, service providers and user-entity controls. - Excel
Trust Services Criteria Response Register
Its Framework References cite this criterion. Lists the 61 Trust Services Criteria by number and series title, with blank columns for your own controls, owners and evidence. It makes no coverage claim. - Excel
SOC 2 Readiness Self-Assessment
Its Framework References cite this criterion. A single readiness assessment that shows blocking items and where to start before a SOC 2 examination. It gives no score.
Criterion text: 2017 Trust Services Criteria (with revised points of focus, 2022). © 2022 Association of International Certified Professional Accountants. All rights reserved. COSO principles © 2019 Committee of Sponsoring Organizations of the Treadway Commission (COSO). All rights reserved. Reproduced from copies of AICPA's published text, which come from two lineages (the AICPA document in two versions, and one structured-data publisher) and agree across them; check it against AICPA's own before relying on it.