control
CC5.3 — The entity deploys control activities through policies that establish what is expected and in procedures that put policies into action.
The entity deploys control activities through policies that establish what is expected and in procedures that put policies into action.
Record JSON · Open in map · Data retrieval guide
Catalog revision: 24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028. A connection does not establish full coverage.
Attributes
- framework
- soc2
- type
- preventive
- category
- administrative
Details
- control_id
- CC5.3
- framework
- soc2
- group
- Common Criteria (Security)
- domains
- Financial Reporting Controls (SOX)
- Governance, Policy & Oversight
- risk_count
- 2
- control_type
- preventive
- control_category
- administrative
- automation
- manual
- key_control
- False
- requirement_status
- Not provided
- requirement_frequency
- Not provided
- source_url
- Not provided
- source_pages
- Not provided
Source
No record-specific source URL is provided.
Connections
- CC5.3 — The entity deploys control activities through policies that establish what is expected and in procedures that put policies into action. belongs_to SOC 2 (TSC)
- UC-GOV-14 — Establish and maintain approved security policies and procedures maps_to CC5.3 — The entity deploys control activities through policies that establish what is expected and in procedures that put policies into action.
- framework
- soc2
- control_id
- CC5.3
- coverage
- full
- relationship
- superset_of
- delta
- Not provided
- source_version
- 2017 TSC
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.