What AICPA SOC 2 Common Criteria CC3 - Risk Assessment (COSO Principles 6-9) requires
CC3 is the Risk Assessment series of the SOC 2 Common Criteria (COSO Principles 6-9). It requires the entity to specify objectives with sufficient clarity, identify and analyze risks to those objectives, consider the potential for fraud, and identify and assess changes that could significantly affect the system of internal control. The criteria are CC3.1-CC3.4.
Pillar: Cybersecurity · Authority: Association of International Certified Professional Accountants (AICPA & CIMA) · Version: 1.0.0 · Last updated:
Primary source: https://www.aicpa-cima.com/resources/landing/2017-trust-services-criteria
SHA-256 integrity: 52e6264a67fcd4f9115bf28d1ce7c4119f6df16236e17a28cf1556b97c65fb1a
Primary Citations — 5 traced to source
- AICPA Trust Services Criteria, https://www.aicpa-cima.com/resources/landing/2017-trust-services-criteria, CC3.1, 2017
- AICPA Trust Services Criteria, https://www.aicpa-cima.com/resources/landing/2017-trust-services-criteria, CC3.2, 2017
+ 3 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.
Access
- Discovery (free): /api/v1/nodes/soc2-cc3-risk-assessment.json — 6-field metadata
- Vault (full node): /api/v1/vault/nodes/soc2-cc3-risk-assessment.json — full 13-key payload, $0.01 USDC (L402/Skyfire/Direct Base)
- Canonical URL: https://bidda.com/intelligence/soc2-cc3-risk-assessment
- Back to registry: Browse all 10,090 compliance nodes