Choose framework

SOC 2

Common Criteria (Security)

33 controls in this category. Click any control to see implementation guidance, evidence requirements, and common audit failures.

COSO Principle 1: Demonstrates Commitment to Integrity and Ethical Values

Common Criteria (Security)

COSO Principle 2: Board of Directors Demonstrates Independence from Management

Common Criteria (Security)

COSO Principle 3: Management Establishes Structures, Reporting Lines, and Authorities

Common Criteria (Security)

COSO Principle 4: Demonstrates Commitment to Attract, Develop, and Retain Competent Individuals

Common Criteria (Security)

COSO Principle 5: Holds Individuals Accountable for Internal Control Responsibilities

Common Criteria (Security)

COSO Principle 13: Obtains or Generates Relevant, Quality Information

Common Criteria (Security)

COSO Principle 14: Internally Communicates Information

Common Criteria (Security)

COSO Principle 15: Externally Communicates Information

Common Criteria (Security)

COSO Principle 6: Specifies Suitable Objectives

Common Criteria (Security)

COSO Principle 7: Identifies and Analyzes Risk

Common Criteria (Security)

COSO Principle 8: Assesses Fraud Risk

Common Criteria (Security)

COSO Principle 9: Identifies and Analyzes Significant Change

Common Criteria (Security)

COSO Principle 16: Selects, Develops, and Performs Ongoing and/or Separate Evaluations

Common Criteria (Security)

COSO Principle 17: Evaluates and Communicates Deficiencies

Common Criteria (Security)

COSO Principle 10: Selects and Develops Control Activities That Mitigate Risks

Common Criteria (Security)

COSO Principle 11: Selects and Develops General Controls Over Technology

Common Criteria (Security)

COSO Principle 12: Deploys Through Policies and Procedures

Common Criteria (Security)

Logical and Physical Access - Security Software, Infrastructure, and Architectures

Common Criteria (Security)

Logical and Physical Access - User Registration and Authorization

Common Criteria (Security)

Logical and Physical Access - Role-Based Access and Least Privilege

Common Criteria (Security)

Logical and Physical Access - Physical Access Restrictions

Common Criteria (Security)

Logical and Physical Access - Logical Access to Protected Assets

Common Criteria (Security)

Logical and Physical Access - Security Against Threats Outside System Boundaries

Common Criteria (Security)

Logical and Physical Access - Transmission of Data

Common Criteria (Security)

Logical and Physical Access - Prevention and Detection of Unauthorized Software

Common Criteria (Security)

System Operations - Detection of Security Events

Common Criteria (Security)

System Operations - Monitoring of System Components for Anomalies

Common Criteria (Security)

System Operations - Evaluation of Security Events

Common Criteria (Security)

System Operations - Incident Response

Common Criteria (Security)

System Operations - Incident Recovery

Common Criteria (Security)

Change Management - Changes to Infrastructure, Data, Software, and Procedures

Common Criteria (Security)

Risk Mitigation - Risk Mitigation Activities

Common Criteria (Security)

Risk Mitigation - Vendor and Business Partner Risk Management

Common Criteria (Security)

Assess SOC 2 Common Criteria (Security)

Track every control, collect evidence, and generate audit-ready reports with AuditFront.

Start Free Assessment

Free plan · No credit card required