AICPA SOC 3
Management responsibilities and assertion – AICPA SOC 3

AICPA SOC 3 M-9: Select the applicable criteria and hold a reasonable basis for the assertion

Management selects the applicable criteria and identifies them in its assertion, and has a reasonable basis for the assertion by assessing how effective the system's controls are against those criteria (Guide Table 4-5, AT-C 205 .63e).

Maintained by Gerard BlokdykControl text last updated

Other controls in Management responsibilities and assertion – AICPA SOC 3

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll AICPA SOC 3 controls