control
CC3.1 — The entity specifies objectives with sufficient clarity to enable the identification and assessment of risks relating to objectives.
The entity specifies objectives with sufficient clarity to enable the identification and assessment of risks relating to objectives.
Record JSON · Open in map · Data retrieval guide
Catalog revision: 24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028. A connection does not establish full coverage.
Attributes
- framework
- soc2
- type
- preventive
- category
- administrative
Details
- control_id
- CC3.1
- framework
- soc2
- group
- Common Criteria (Security)
- domains
- AI Governance
- Financial Reporting Controls (SOX)
- Risk Assessment & Management
- risk_count
- 2
- control_type
- preventive
- control_category
- administrative
- automation
- manual
- key_control
- False
- requirement_status
- Not provided
- requirement_frequency
- Not provided
- source_url
- Not provided
- source_pages
- Not provided
Source
No record-specific source URL is provided.
Connections
- UC-RISK-04 — Define objectives and business context for risk assessment maps_to CC3.1 — The entity specifies objectives with sufficient clarity to enable the identification and assessment of risks relating to objectives.
- framework
- soc2
- control_id
- CC3.1
- coverage
- full
- relationship
- superset_of
- delta
- Not provided
- source_version
- 2017 TSC
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- CC3.1 — The entity specifies objectives with sufficient clarity to enable the identification and assessment of risks relating to objectives. belongs_to SOC 2 (TSC)