YouAttest GRC Survey for SOC 2 YouAttest is a certified identity re-certification tool that automates identity governance. This survey will help determine if your security and governance would improve with YouAttest. Does your organization segregate incompatible duties and implement alternative controls where necessary? SOC 2 Standard CC5.1.6Addresses Segregation of Duties — Management segregates incompatible duties and, where such segregation is not practical, management selects and develops alternative control activities. Please select your answer Yes No Does your organization understand dependencies between business processes and technology general controls? SOC 2 Standard CC5.2.1Determines Dependency Between the Use of Technology in Business Processes and Technology General Controls — Management understands and determines the dependency and linkage between business processes, automated control activities, and technology general controls. Please select your answer Yes No Does your organization establish security management process controls to restrict access and protect assets? SOC 2 Standard CC5.2.3Establishes Relevant Security Management Process Controls Activities — Management selects and develops control activities that are designed and implemented to restrict technology access rights to authorized users commensurate with their job responsibilities and to protect the entity’s assets from external threats. Please select your answer Yes No Does your organization perform control activities in a timely manner as defined by policies? SOC 2 Standard CC5.3.3Performs in a Timely Manner — Responsible personnel perform control activities in a timely manner as defined by the policies and procedures. Please select your answer Yes No Does your organization investigate and take corrective action on identified matters from control activities? SOC 2 Standard CC5.3.4Takes Corrective Action — Responsible personnel investigate and act on matters identified as a result of executing control activities. Please select your answer Yes No Does your organization periodically reassess policies and procedures for continued relevance? SOC 2 Standard CC5.3.5Reassesses Policies and Procedures — Management periodically reviews control activities to determine their continued relevance and refreshes them when necessary. Please select your answer Yes No Does your organization periodically review access credentials for validity? SOC 2 Standard CC6.2.2Reviews Validity of Access Credentials — The entity reviews access credentials on a periodic basis for validity (for example, employees, contractors, vendors, and business partner personnel) and inappropriate system or service accounts. Please select your answer Yes No Does your organization authorize, modify, or remove access based on roles, least privilege, and segregation of duties? SOC 2 Standard CC6.3The entity authorizes, modifies, or removes access to data, software, functions, and other protected information assets based on roles, responsibilities, or the system design and changes, giving consideration to the concepts of least privilege and segregation of duties, to meet the entity’s objectives. Please select your answer Yes No Does your organization use access control structures like role-based access to restrict access and support segregation of functions? SOC 2 Standard CC6.3.3Uses Access Control Structures — The entity uses access control structures, such as role-based access controls, to restrict access to protected information assets, limit privileges, and support segregation of incompatible functions. Please select your answer Yes No Does your organization periodically review access roles and rules for appropriateness? SOC 2 Standard CC6.3.4Reviews Access Roles and Rules — The appropriateness of access roles and access rules is reviewed on a periodic basis for unnecessary and inappropriate individuals (for example, employees, contractors, vendors, business partner personnel) and inappropriate system or service accounts. Access roles and rules are modified, as appropriate. Please select your answer Yes No 1 out of 10 Thank you for completing the SOC 2 Assessment! Your responses have been successfully recorded, and your personalized results are now available. Below, you’ll find your overall score along with a detailed breakdown of key controls that may require attention. Use these insights to strengthen and refine your security posture. Important: Please fill out the contact form below, to retrieve your full results and in-depth analysis. Name Email Business Phone GRC Partner Email (optional) Time's up
