workflow
Vendor SOC 1/SOC 2 Report Review & CUEC Mapping
Reach a defensible reliance conclusion on a service organization's SOC 1/SOC 2 report. The workflow instance runs on an Audit item (audit_type: vendor_review) created for this vendor's SOC report period — enrich that item, never duplicate it; its native fields carry the report and reliance metadata (external_firm = CPA firm, opinion = service auditor's opinion, period_start/period_end = report coverage, report_date, rating = overall reliance verdict). Consumes the vendor risk handoff package from the Third-Party Vendor Risk Lifecycle workflow — the existing Vendor item, its tier, and the dependent Process items. In scope: report scope and type confirmation, the service auditor's opinion and exception analysis, complementary user entity control (CUEC) mapping, bridge/gap-period coverage, and the documented reliance decision — producing the SOC reliance memo and the reviewer-ready reliance package. Out of scope: the vendor's initial risk tiering and onboarding, and ongoing control monitoring. Hands the completed reliance package to the Continuous Controls Monitoring (ISCM) Cycle (and Third-Party ICT Vendor Regulatory Assurance) workflows.
Record JSON · Open in map · Data retrieval guide
Catalog revision: 24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028. A connection does not establish full coverage.
Attributes
- domain
- controls
- department
- procurement
- lineOfDefense
- monitor
Details
- teams
- procurement
- it
- domains
- controls
- standards
- soc1
- soc2
- sourceTemplateId
- workflow-library:controls-vendor-soc-cuec-review
- releaseId
- sha256:31af594ee8aeb5af01927dcc0e95bf6ea9f05a8d45fd1524d012709768b688e0
- canonicalUrl
- https://workflow-library.com/all/?w=controls-vendor-soc-cuec-review
- capabilities
- mappingStatus
- mapped
- lineOfDefense
- monitor
- controls
- UC-ACCESS-21
- UC-TPRM-04
- roleIntegrity
- activityCount
- 0
- ermPhases
- lineRoles
- serviceModes
- warnings
Source
No record-specific source URL is provided.
Download workflow template · Release: sha256:31af594ee8aeb5af01927dcc0e95bf6ea9f05a8d45fd1524d012709768b688e0