← SOC 2 Trust Services Criteria in plain English

CC2.2 CC2

Communication and Information / CC2.2

Telling your own people what is expected of them

Think of it likeSaying out loud who takes the bins out, rather than assuming everyone knows.

In plain English

Internal control objectives and individual responsibilities are communicated inside the organization, and there is a route for staff to report problems upward, including one that bypasses their own manager.

Related CSF, CIS and ISO controls (unofficial mapping)