Is it possible to exclude controls from the scope of a SOC-2 assessment? If so, how and where would I find these excluded controls? (I’m aware that you can assign a control as planned.)
SHARE THIS TOPIC
Ask a Question
Viewing 0 reply threads
Viewing 0 reply threads
- You must be logged in to reply to this topic.
Hello! As you mentioned, you can exclude controls by marking them as “planned” or excluding the tests under the controls. You can also create scopes for your SOC 2 audits in the sidebar in “TrustOps”