← SOC 2 Trust Services Criteria in plain English

CC1.2 CC1

Control Environment / CC1.2

Board oversight that is independent of the people it oversees

Think of it likeHaving someone at the table who does not report to the cook reviewing whether the kitchen is clean.

In plain English

There is a governing body with enough independence and expertise to challenge management, and it genuinely exercises oversight of internal control rather than nodding through whatever it is shown.

Related CSF, CIS and ISO controls (unofficial mapping)