← SOC 2 Trust Services Criteria in plain English

CC5.2 CC5

Control Activities / CC5.2

General controls over the technology the other controls depend on

Think of it likeLooking after the fuse box, because everything else in the house runs through it.

In plain English

Technology general controls are selected and developed to support the achievement of objectives. If the underlying infrastructure and its access controls are weak, controls built on top of it inherit that weakness.

Related CSF, CIS and ISO controls (unofficial mapping)