SOC2-PI1.4 PI1.4 Controls over output delivery
SOC2-PI1.4 in SOC 2 (the AICPA 2017 Trust Services Criteria with the revised points of focus). All SOC 2 controls held. Open SOC 2 on the standards site.
The control as we hold it
PI1.4 Controls over output delivery. Policies and procedures make output available or deliver it completely, accurately and on time in line with specifications. Points of focus: stored or delivered output is protected against theft, destruction, corruption or deterioration; it goes only to intended parties; completeness, accuracy and timeliness of distribution are provided for; and records of output activity are created and kept.
Reviewed and closest counterparts in the other frameworks
Reviewed rows come from a released pair; a closest match is the nearest held text and is not a reviewed row.
NIST SP 800-53 Rev 5
- NIST800-AC-3 AC-3 Access Enforcement (closest match)
- NIST800-AU-12 AU-12 Audit Record Generation (closest match)
- NIST800-CM-13 CM-13 Data Action Mapping (closest match)
- NIST800-SC-8 SC-8 Transmission Confidentiality and Integrity (closest match)
- NIST800-SC-45 SC-45 System Time Synchronization (closest match)
- NIST800-SI-10 SI-10 Information Input Validation (closest match)
- NIST800-SI-15 SI-15 Information Output Filtering (closest match)
What an auditor commonly asks for
General guidance for this control area (domain: PI - Processing Integrity), in our words, not a statement of the standard and not binding on an assessor.
- the processing controls and their monitoring
- the validation and completeness records
- the error and exception records