From the course: Advanced SOC 2 Auditing: Proven Strategies for Auditing the Security, Availability and Confidentiality TSCs

Unlock this course with a free trial

Join today to access over 25,300 courses taught by industry experts.

Exploring CC1.4 - COSO Principle 4: Fostering a commitment to competent talent acquisition, development, and retention in alignment with objectives

Exploring CC1.4 - COSO Principle 4: Fostering a commitment to competent talent acquisition, development, and retention in alignment with objectives

From the course: Advanced SOC 2 Auditing: Proven Strategies for Auditing the Security, Availability and Confidentiality TSCs

Start my 1-month free trial Buy for my team

Exploring CC1.4 - COSO Principle 4: Fostering a commitment to competent talent acquisition, development, and retention in alignment with objectives

“

- [Instructor] Welcome to our analysis of CC1.4. In this section, we'll explore the organization's dedication to bringing in, cultivating and retaining skilled individuals, ensuring they align with the organization's objectives. Our exploration of CC1.4 focuses on the strategic approach of the organization. It covers how policies and practices are set to ensure competence, the assessment of these policies, the training provided to individuals and plans in place for succession. The controls for CC1.4 revolve around orientation training for new hires to understand the roles within the company. Security awareness training, mandatory training upon hiring and annual renewals to keep employees abreast of security responsibilities. Phishing campaigns, regular simulated phishing tests with remedial training for those who fail and security bulletins, subscriptions to news bulletins to stay informed about emerging security threats, including vendor communication about vulnerabilities and…

Contents