Requirement · SOC2-CC5.2
CC5.2 · Selects and develops general controls over technology
Controls (3)
| Control | Name | Domain |
|---|---|---|
| SOD-01 | Segregation of incompatible duties in SAP | Segregation of Duties |
| P2P-01 | Purchase orders follow approval thresholds; no self-approval | Procure-to-Pay |
| P2P-02 | Vendor master changes require dual control | Procure-to-Pay |