Products / Frameworks / 4.1.0

SOC 2

Supports evidence organization and readiness mapping for applicable Trust Services Criteria.

All frameworks Download control list (CSV)

This is the MSP 4.1.0 catalog snapshot, not the full publisher standard and not an assertion of Free/Professional parity. All conclusions require scope, adequate evidence and an authorized reviewer. This profile uses clause, family, criteria-group or locally authored readiness entries. It does not enumerate every official subcontrol or assessment objective.

12 catalog entries0 with exact test mappings6 family-support entries6 manual / unmapped

Search controls or testsCoverage

Control / requirement	Packaged guidance & evidence	Coverage
`CC1`Control Environment	Control Environment Evidence and test details No exact automated mapping is packaged for this entry. Supply and review policies, records, interviews, observations or other appropriate evidence; absence of a mapping is not PASS.	Manual / no exact mapping
`CC2`Communication & Information	Communication & Information Evidence and test details No exact automated mapping is packaged for this entry. Supply and review policies, records, interviews, observations or other appropriate evidence; absence of a mapping is not PASS.	Manual / no exact mapping
`CC3`Risk Assessment	Risk Assessment Evidence and test details No exact automated mapping is packaged for this entry. Supply and review policies, records, interviews, observations or other appropriate evidence; absence of a mapping is not PASS.	Manual / no exact mapping
`CC4`Monitoring	Monitoring Evidence and test details No exact automated mapping is packaged for this entry. Supply and review policies, records, interviews, observations or other appropriate evidence; absence of a mapping is not PASS.	Manual / no exact mapping
`CC5`Control Activities	Control Activities Evidence and test details No exact automated mapping is packaged for this entry. Supply and review policies, records, interviews, observations or other appropriate evidence; absence of a mapping is not PASS.	Manual / no exact mapping
`CC6`Logical & Physical Access	Logical & Physical Access Evidence and test details Applicable supporting collectors: ADSEC, ENTRA, NETWORK. No exact requirement-to-test mapping is published for this row in the 4.1.0 mapping CSV. Family applicability is not proof that this requirement receives a mapped test result.	Family supporting scope
`CC7`System Operations	System Operations Evidence and test details Applicable supporting collectors: ENTRA, NETWORK, VULN, WINDOWS. No exact requirement-to-test mapping is published for this row in the 4.1.0 mapping CSV. Family applicability is not proof that this requirement receives a mapped test result.	Family supporting scope
`CC8`Change Management	Change Management Evidence and test details Applicable supporting collectors: GPO, VMWARE, WINDOWS. No exact requirement-to-test mapping is published for this row in the 4.1.0 mapping CSV. Family applicability is not proof that this requirement receives a mapped test result.	Family supporting scope
`CC9`Risk Mitigation	Risk Mitigation Evidence and test details No exact automated mapping is packaged for this entry. Supply and review policies, records, interviews, observations or other appropriate evidence; absence of a mapping is not PASS.	Manual / no exact mapping
`A1`Availability	Availability Evidence and test details Applicable supporting collectors: BACKUP, STORAGE. No exact requirement-to-test mapping is published for this row in the 4.1.0 mapping CSV. Family applicability is not proof that this requirement receives a mapped test result.	Family supporting scope
`C1`Confidentiality	Confidentiality Evidence and test details Applicable supporting collectors: CERTTLS, ENTRA, STORAGE. No exact requirement-to-test mapping is published for this row in the 4.1.0 mapping CSV. Family applicability is not proof that this requirement receives a mapped test result.	Family supporting scope
`P1`Privacy	Privacy Evidence and test details Applicable supporting collectors: CERTTLS, ENTRA, STORAGE. No exact requirement-to-test mapping is published for this row in the 4.1.0 mapping CSV. Family applicability is not proof that this requirement receives a mapped test result.	Family supporting scope