ISAE 3402 - Assurance Reports on Controls at a Service Organisation
Criteria, materiality and understanding the system (15 to 20) – ISAE 3402 - Assurance Reports on Controls at a Service Organisation

ISAE 3402 - Assurance Reports on Controls at a Service Organisation 3402.17: ISAE 3402 paragraph 17: Assessing the Suitability of the Criteria

What does 3402.17 require?

On the design of controls, the criteria must at least require that the service organisation has identified what risks stand in the way of its stated control objectives, and that the controls in the description, if they work as described, would reasonably assure that the objectives can be met in spite of those risks.

Maintained by Gerard BlokdykControl text last updated

Other controls in Criteria, materiality and understanding the system (15 to 20) – ISAE 3402 - Assurance Reports on Controls at a Service Organisation

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll ISAE 3402 - Assurance Reports on Controls at a Service Organisation controls