Safeguard Docs
Frameworks and Connectors

SOC2 and connectors

Which connectors provide evidence for SOC2, for which controls, and how to connect them.

Safeguard's automated tests map to 34 controls of SOC2 Trust Services Criteria (2017, revised points of focus 2022). 855 tests apply: 797 read a connected system, and 58 read Safeguard's own records (policies, people, training and devices), so they need no connector. A passing result is evidence toward a control, not proof that the control is met on its own.

The same criteria serve SOC2 Type 1 and SOC2 Type 2.

In the framework library: SOC2 Type 1 and SOC2 Type 2, with what a scan checks, the controls and the policy templates.

How to connect for this framework

  1. Connect the systems you run from the table below. Each connector links to its setup steps.
  2. Open the framework on Compliance › Frameworks (SOC2 Type 1 or SOC2 Type 2), then its Connectors tab: it lists the connectors that answer this framework's tests, which of them you have connected, and whether each connection is healthy.
  3. Tests run on their schedule, or straight away with Run now on Compliance › Tests. A passing test counts toward its controls once its preview period has ended.

Automated tests are switched on per workspace by the Safeguard team.

Connectors with automated evidence (360)

ConnectorControls it provides evidence forTests
Amazon Web Services (also AWS GovCloud, AWS CodeCommit, AWS Inspector, Amazon CloudWatch, Amazon S3, AWS Security Hub)A1.1, A1.2, A1.3, C1.1, CC2.3, CC6.1, CC6.2, CC6.3, CC6.6, CC6.7, CC7.1, CC7.2, CC7.3, CC7.4, CC8.1148
Google Cloud PlatformA1.1, A1.2, C1.1, CC2.1, CC2.3, CC6.1, CC6.2, CC6.3, CC6.6, CC6.7, CC6.8, CC7.1, CC7.2, CC7.3, CC8.1114
Microsoft Azure (also Microsoft Entra ID, Azure Government)A1.1, A1.2, C1.1, CC2.3, CC6.1, CC6.2, CC6.3, CC6.6, CC6.7, CC6.8, CC7.1, CC7.2, CC7.3139
GitHub (also GitHub Enterprise, GitHub Issues)C1.1, CC2.1, CC6.1, CC6.2, CC6.3, CC6.8, CC7.1, CC7.2, CC7.3, CC7.4, CC7.5, CC8.144
GitLab (also GitLab Issues, GitLab Self-Managed)C1.1, CC2.1, CC6.1, CC6.2, CC6.3, CC6.7, CC7.1, CC7.2, CC7.3, CC7.4, CC7.5, CC8.146
Google Workspace (also Google Cloud Identity, Google SSO)C1.1, CC6.1, CC6.2, CC6.3, CC6.5, CC6.6, CC6.7, CC6.8, CC7.1, CC7.2, CC9.228
Oracle Cloud (also Oracle Cloud Government)A1.2, C1.1, CC2.1, CC6.1, CC6.2, CC6.3, CC6.6, CC6.7, CC6.8, CC7.1, CC7.266
Azure DevOpsC1.1, CC2.1, CC6.1, CC6.2, CC6.3, CC7.1, CC7.3, CC7.4, CC7.5, CC8.125
Kubernetes (also Gatekeeper OPA, Kyverno)A1.1, C1.1, CC6.1, CC6.3, CC6.6, CC6.7, CC6.8, CC7.2, CC8.149
HetznerA1.2, C1.1, CC6.1, CC6.3, CC6.6, CC6.7, CC7.1, CC7.215
JamfC1.1, CC6.1, CC6.2, CC6.5, CC6.6, CC6.7, CC6.8, CC7.19
Microsoft IntuneC1.1, CC6.1, CC6.2, CC6.5, CC6.6, CC6.7, CC6.8, CC7.110
OVHcloudA1.2, C1.1, CC6.1, CC6.2, CC6.3, CC6.6, CC7.1, CC7.227
StackRox (also Red Hat Advanced Cluster Security)CC4.1, CC6.1, CC6.3, CC6.7, CC6.8, CC7.1, CC7.2, CC7.313
BitbucketC1.1, CC2.1, CC6.1, CC6.2, CC6.3, CC7.1, CC8.118
Cisco Meraki SMC1.1, CC6.1, CC6.2, CC6.5, CC6.7, CC6.8, CC7.18
CloudflareCC6.1, CC6.2, CC6.3, CC6.6, CC6.7, CC7.1, CC7.218
FleetC1.1, CC6.1, CC6.2, CC6.5, CC6.6, CC6.8, CC7.18
GoDaddyA1.2, CC6.1, CC6.2, CC6.3, CC6.6, CC6.7, CC7.111
Ivanti NeuronsC1.1, CC6.1, CC6.2, CC6.5, CC6.7, CC6.8, CC7.18
JiraC1.1, CC6.1, CC6.2, CC7.1, CC7.3, CC7.4, CC7.510
JumpCloud (also JumpCloud MDM, JumpCloud SSO)C1.1, CC6.1, CC6.2, CC6.3, CC6.6, CC6.8, CC7.115
KandjiC1.1, CC6.1, CC6.2, CC6.5, CC6.6, CC6.8, CC7.18
KolideC1.1, CC6.1, CC6.2, CC6.5, CC6.6, CC6.8, CC7.18
MiradoreC1.1, CC6.1, CC6.2, CC6.5, CC6.7, CC6.8, CC7.18
MongoDB AtlasA1.2, C1.1, CC6.1, CC6.2, CC6.3, CC6.6, CC7.28
MosyleC1.1, CC6.1, CC6.2, CC6.5, CC6.6, CC6.8, CC7.19
ServiceNowCC6.2, CC6.3, CC7.1, CC7.3, CC7.4, CC7.5, CC8.19
SpaceshipA1.2, CC6.1, CC6.2, CC6.3, CC6.6, CC6.7, CC7.111
Alibaba CloudA1.2, CC6.1, CC6.3, CC6.6, CC6.7, CC7.220
AsanaCC6.2, CC6.3, CC7.1, CC7.3, CC7.4, CC7.58
ChatGPTC1.2, CC6.1, CC6.2, CC6.3, CC6.5, CC7.26
Claude (Anthropic)C1.2, CC6.1, CC6.2, CC6.3, CC6.5, CC7.210
ClickUpCC6.2, CC6.3, CC7.1, CC7.3, CC7.4, CC7.58
CrowdStrike FalconCC6.2, CC6.8, CC7.1, CC7.2, CC7.3, CC7.415
Datadog (also Datadog CSM)A1.1, CC6.2, CC7.1, CC7.2, CC7.3, CC7.411
ElevenLabsC1.2, CC6.1, CC6.2, CC6.3, CC6.5, CC7.27
Fireworks AIC1.2, CC6.1, CC6.2, CC6.3, CC6.5, CC7.210
HerokuA1.2, CC6.1, CC6.2, CC6.3, CC6.7, CC7.18
ManageEngineC1.1, CC6.1, CC6.2, CC6.5, CC6.8, CC7.16
Mistral AIC1.2, CC6.1, CC6.2, CC6.3, CC6.5, CC7.29
Monday.comCC6.2, CC6.3, CC7.1, CC7.3, CC7.4, CC7.58
NinjaOneC1.1, CC6.1, CC6.2, CC6.5, CC6.8, CC7.16
OpenAI API PlatformC1.2, CC6.1, CC6.2, CC6.3, CC6.5, CC7.212
Redis CloudA1.2, CC6.1, CC6.2, CC6.3, CC6.6, CC6.78
ShortcutCC6.2, CC6.3, CC7.1, CC7.3, CC7.4, CC7.58
SolarWinds Service DeskCC6.2, CC6.3, CC7.1, CC7.3, CC7.4, CC7.58
SupabaseA1.2, CC6.1, CC6.2, CC6.3, CC6.6, CC6.77
VMware Workspace ONEC1.1, CC6.1, CC6.2, CC6.7, CC6.8, CC7.17
xAIC1.2, CC6.1, CC6.2, CC6.3, CC6.5, CC7.25
YouTrackCC6.2, CC6.3, CC7.1, CC7.3, CC7.4, CC7.58
AkamaiCC6.1, CC6.2, CC6.3, CC6.6, CC6.76
Auth0 (also Auth0 SSO)CC6.1, CC6.2, CC6.3, CC6.6, CC7.212
Cisco Secure EndpointCC6.8, CC7.1, CC7.2, CC7.3, CC7.46
CodebergC1.1, CC6.1, CC6.2, CC6.3, CC8.16
DigitalOceanA1.2, CC6.6, CC6.7, CC7.1, CC7.210
GiteaC1.1, CC6.1, CC6.2, CC6.3, CC8.16
Hugging FaceC1.2, CC6.1, CC6.2, CC6.3, CC6.58
IBM CloudCC6.1, CC6.2, CC6.3, CC6.6, CC7.217
LinearCC6.2, CC7.1, CC7.3, CC7.4, CC7.59
LinodeA1.2, CC6.1, CC6.2, CC6.3, CC6.66
Microsoft Defender for EndpointCC6.8, CC7.1, CC7.2, CC7.3, CC7.412
Okta (also Okta SSO)CC6.1, CC6.2, CC6.3, CC6.6, CC7.214
OpenRouterC1.2, CC6.1, CC6.2, CC6.3, CC6.58
PlanetScaleA1.2, CC6.1, CC6.2, CC6.3, CC8.16
Red Hat OpenShiftCC6.1, CC6.3, CC6.6, CC6.8, CC7.25
RedmineCC6.2, CC7.1, CC7.3, CC7.4, CC7.55
SentinelOneCC6.2, CC6.8, CC7.2, CC7.3, CC7.48
SentryC1.1, CC6.1, CC6.2, CC6.3, CC7.26
Sophos Intercept XCC6.2, CC6.8, CC7.2, CC7.3, CC7.49
Bitdefender GravityZoneCC6.8, CC7.2, CC7.3, CC7.45
Citrix Endpoint ManagementCC6.2, CC6.7, CC6.8, CC7.15
ClickHouseA1.2, CC6.2, CC6.3, CC6.65
Cortex XDRCC6.8, CC7.2, CC7.3, CC7.45
CybereasonCC6.8, CC7.2, CC7.3, CC7.45
Deep InstinctCC6.8, CC7.2, CC7.3, CC7.44
DockerC1.1, CC6.1, CC6.2, CC6.34
Elastic ObservabilityA1.2, CC6.2, CC6.3, CC7.26
Elastic SecurityCC6.8, CC7.2, CC7.3, CC7.45
ESET ProtectCC6.8, CC7.2, CC7.3, CC7.44
FastlyCC6.1, CC6.2, CC6.3, CC6.75
Fortinet FortiEDRCC6.8, CC7.2, CC7.3, CC7.45
FreshserviceCC6.2, CC7.1, CC7.3, CC7.44
GrafanaCC6.1, CC6.2, CC6.3, CC7.25
GustoCC1.3, CC2.1, CC6.2, CC6.32
HexnodeCC6.2, CC6.5, CC6.8, CC7.15
HuntressCC6.8, CC7.2, CC7.3, CC7.46
InfisicalCC6.1, CC6.2, CC6.3, CC7.29
Jamf ProtectCC6.8, CC7.2, CC7.3, CC7.44
Kaspersky EndpointCC6.8, CC7.2, CC7.3, CC7.45
KeycloakCC6.1, CC6.2, CC6.3, CC7.27
LogicMonitorCC6.2, CC6.3, CC7.2, CC7.45
NextcloudCC6.1, CC6.2, CC6.3, CC6.75
OpenStackA1.2, CC6.1, CC6.3, CC6.64
Red CanaryCC6.8, CC7.2, CC7.3, CC7.44
RenderA1.2, CC6.1, CC6.2, CC6.35
ScalewayCC6.1, CC6.2, CC6.3, CC6.65
SigNozCC6.1, CC6.2, CC6.3, CC7.27
SimpleMDMC1.1, CC6.1, CC6.6, CC7.15
SnowflakeCC6.1, CC6.2, CC6.3, CC6.65
SplunkCC6.2, CC6.3, CC7.2, CC7.35
Sumo LogicCC6.1, CC6.2, CC6.3, CC7.26
Symantec EndpointCC6.8, CC7.2, CC7.3, CC7.45
TaniumCC6.8, CC7.2, CC7.3, CC7.44
Terraform CloudCC6.1, CC6.2, CC6.3, CC8.15
TrellixCC6.8, CC7.2, CC7.3, CC7.44
Trend Micro Apex OneCC6.8, CC7.2, CC7.3, CC7.45
UpCloudA1.2, CC6.2, CC6.3, CC6.64
VercelCC6.1, CC6.2, CC6.3, CC8.16
VMware Carbon BlackCC6.8, CC7.2, CC7.3, CC7.45
VultrA1.2, CC6.2, CC6.3, CC6.65
WithSecureCC6.8, CC7.2, CC7.3, CC7.45
AirtableCC6.1, CC6.2, CC6.34
AuthentikCC6.1, CC6.2, CC6.35
BackblazeA1.2, CC6.1, CC6.63
BambooHRCC1.3, CC2.1, CC6.21
BaramundiCC6.2, CC6.8, CC7.14
Ceridian DayforceCC1.3, CC2.1, CC6.21
Cloudflare AccessCC6.1, CC6.2, CC6.33
CoralogixCC6.2, CC6.3, CC7.23
DeelCC1.3, CC2.1, CC6.21
Duo SecurityCC6.1, CC6.2, CC6.36
DynatraceCC6.2, CC6.3, CC7.23
Employment HeroCC1.3, CC2.1, CC6.21
env0CC6.2, CC6.3, CC8.14
FactorialCC1.3, CC2.1, CC6.21
Fly.ioCC6.1, CC6.2, CC6.34
FusionAuthCC6.1, CC6.2, CC6.34
GerritCC6.2, CC6.3, CC8.15
HashiCorp ConsulCC6.1, CC6.6, CC6.72
HashiCorp NomadCC6.1, CC6.6, CC6.72
HiBob (also Bob)CC1.3, CC2.1, CC6.21
HumaansCC1.3, CC2.1, CC6.21
IBM VerifyCC6.1, CC6.2, CC6.34
InstanaCC6.2, CC6.3, CC7.23
Jira Service ManagementCC7.4, CC7.5, CC8.13
Logz.ioCC6.2, CC6.3, CC7.25
LookerCC6.1, CC6.2, CC6.34
MailgunCC6.1, CC6.2, CC6.34
MakeCC6.1, CC6.2, CC6.34
MattermostCC6.1, CC6.2, CC6.34
MinIOA1.2, CC6.1, CC6.63
New RelicCC6.2, CC6.3, CC7.24
OneLogin (also OneLogin SSO)CC6.1, CC6.2, CC6.37
Opsgenie AlertsA1.1, CC6.2, CC7.45
Oracle IdentityCC6.1, CC6.2, CC6.35
ownCloudCC6.1, CC6.2, CC6.34
PagerDutyA1.1, CC6.2, CC7.46
PaychexCC1.3, CC2.1, CC6.21
PingOne (also Ping Identity)CC6.1, CC6.2, CC6.36
Platform.shCC6.1, CC6.2, CC6.34
ProxmoxA1.2, CC6.1, CC6.33
Pulumi (also Pulumi Cloud)CC6.2, CC6.3, CC8.14
Qualys EDRCC6.8, CC7.3, CC7.43
RailwayCC6.1, CC6.2, CC6.34
RipplingCC1.3, CC2.1, CC6.21
RollbarCC6.2, CC6.3, CC7.24
Sage HRCC1.3, CC2.1, CC6.21
SalesforceCC6.1, CC6.2, CC6.34
SAP SuccessFactorsCC1.3, CC2.1, CC6.21
SaplingCC1.3, CC2.1, CC6.21
SharePointC1.1, CC6.1, CC6.74
Site24x7CC6.2, CC6.3, CC7.24
SlackCC6.1, CC6.2, CC6.34
SpaceliftCC6.2, CC6.3, CC8.13
UKGCC1.3, CC2.1, CC6.21
VMwareA1.2, CC6.1, CC7.26
WorkdayCC1.3, CC2.1, CC6.21
ZabbixCC6.2, CC6.3, CC7.24
ZendeskCC6.1, CC6.2, CC6.34
ZenefitsCC1.3, CC2.1, CC6.21
ZitadelCC6.1, CC6.2, CC6.34
ZoomCC6.1, CC6.2, CC6.34
15FiveCC6.2, CC6.32
1PasswordCC6.2, CC6.32
360LearningCC1.4, CC2.21
ActiveCampaignCC6.2, CC6.33
Adobe Acrobat SignCC6.2, CC6.33
Aha!CC6.2, CC6.33
AirbyteCC6.2, CC6.33
AircallCC6.2, CC6.32
AmplitudeCC6.2, CC6.32
AnsibleCC6.2, CC6.33
Apollo IOCC6.2, CC6.32
AptibleCC6.2, CC6.33
AshbyCC6.2, CC6.33
AssemblaCC6.2, CC6.33
AttioCC6.2, CC6.33
BasecampCC6.2, CC6.33
BeanstalkCC6.2, CC6.33
Better StackCC7.2, CC7.43
Beyond IdentityCC6.2, CC6.32
BoldSignCC6.2, CC6.33
BoxCC6.2, CC6.33
BrexCC6.2, CC6.32
CanvaCC6.2, CC6.32
CapsuleCC6.2, CC6.32
CensusCC6.2, CC6.33
Check Point HarmonyCC6.8, CC7.22
Citrix ShareFileCC6.2, CC6.33
CloseCC6.2, CC6.33
CobaltCC4.1, CC7.13
ConfluenceCC6.2, CC6.32
CopperCC6.2, CC6.32
Cortex XSOARCC7.3, CC7.42
CoupaCC6.2, CC6.33
Culture AmpCC6.2, CC6.32
D3 SecurityCC7.3, CC7.42
DatabricksCC6.2, CC6.33
dbt CloudCC6.2, CC6.32
DialpadCC6.2, CC6.33
DoceboCC1.4, CC2.21
DocuSignCC6.2, CC6.33
DropboxCC6.2, CC6.33
Dropbox SignCC6.2, CC6.33
EgnyteCC6.2, CC6.33
FigmaCC6.2, CC6.33
FivetranCC6.2, CC6.33
folkCC6.2, CC6.32
ForgeRockCC6.2, CC6.32
FreshdeskCC6.2, CC6.33
FrontCC6.2, CC6.33
GoHighLevelCC6.2, CC6.33
Google Chronicle SOARCC7.3, CC7.42
Google DriveCC6.1, CC6.71
GoTo ConnectCC6.2, CC6.33
GreenhouseCC6.2, CC6.33
HashiCorp VaultCC6.1, CC7.22
Hevo DataCC6.2, CC6.33
HightouchCC6.2, CC6.32
HiveCC6.2, CC6.32
HubSpotCC6.2, CC6.33
IBM QRadar SOARCC7.3, CC7.42
Immersive LabsCC1.4, CC8.11
InsightlyCC6.2, CC6.33
IntercomCC6.2, CC6.32
IroncladCC6.2, CC6.32
KeapCC6.2, CC6.33
LatticeCC6.2, CC6.32
LaunchpadCC6.2, CC6.32
LessonlyCC1.4, CC2.21
LeverCC6.2, CC6.33
LogtoCC6.1, CC6.36
LoopioCC6.2, CC6.33
MalwarebytesCC6.8, CC7.23
Microsoft Dynamics 365CC6.2, CC6.33
MiroCC6.2, CC6.32
MixpanelCC6.2, CC6.32
n8nCC6.2, CC6.33
NetlifyCC6.2, CC6.33
NorthflankCC6.2, CC6.32
NotionCC6.2, CC6.32
NutanixA1.2, CC6.32
NutshellCC6.2, CC6.33
OneflowCC6.2, CC6.32
OneSpan SignCC6.2, CC6.32
OneTrust VendorpediaCC6.2, CC6.32
OpalCC6.2, CC6.32
OpenPhoneCC6.2, CC6.33
PandaDocCC6.2, CC6.33
PingdomCC6.2, CC6.32
PipedriveCC6.2, CC6.33
PortainerCC6.2, CC6.32
ProductboardCC6.2, CC6.33
Proofpoint Security AwarenessCC1.4, CC2.22
QoveryCC6.2, CC6.33
RampCC6.2, CC6.33
RancherCC6.2, CC6.33
Rapid7 InsightIDRCC7.3, CC7.42
RingCentralCC6.2, CC6.33
RiotCC1.4, CC2.22
Rocket.ChatCC6.2, CC6.33
SailPointCC6.2, CC6.33
SalesflareCC6.2, CC6.32
SegmentCC6.2, CC6.33
SendGridCC6.2, CC6.33
SetylCC6.2, CC6.52
ShuffleCC6.2, CC6.32
SignNowCC6.2, CC6.32
SignRequestCC6.2, CC6.33
SmartsheetCC6.2, CC6.33
Splunk SOARCC7.3, CC7.42
StreakCC6.2, CC6.32
SugarCRMCC6.2, CC6.33
TalentLMSCC1.4, CC2.21
TeamworkCC6.2, CC6.33
TelnyxCC6.2, CC6.32
ThreatConnectCC6.2, CC6.32
TinesCC6.2, CC6.33
ToriiCC6.2, CC6.32
TorqCC7.3, CC7.42
Tray.ioCC6.2, CC6.32
TrelloCC6.2, CC6.33
Udemy BusinessCC1.4, CC2.21
VezaCC6.2, CC6.31
VtigerCC6.2, CC6.33
WasabiA1.2, CC6.63
WebexCC6.2, CC6.33
WebrootCC6.8, CC7.22
WorkableCC6.2, CC6.33
WorkatoCC6.2, CC6.33
WrikeCC6.2, CC6.33
YousignCC6.2, CC6.33
Zendesk SellCC6.2, CC6.33
Zoho CRMCC6.2, CC6.33
Zoho DeskCC6.2, CC6.33
42GearsCC7.11
Action1CC7.12
Aikido SecurityCC7.14
AnchoreCC7.14
AppDynamicsCC7.21
AutomoxCC7.14
BitSightCC7.12
Bright SecurityCC7.14
BugcrowdCC7.12
Burp SuiteCC7.13
Check Point CloudGuardCC7.13
CheckmarxCC7.14
ChronosphereCC7.21
CivoCC6.62
Contrast SecurityCC7.14
CronitorCC7.21
CrowdStrike Falcon CloudCC7.13
Dependency-TrackCC7.14
DetectifyCC7.13
Endor LabsCC7.14
EscapeCC7.14
EsperCC7.12
FirebaseCC6.11
GitGuardianCC7.13
HackerOneCC7.12
IntruderCC7.14
InvictiCC7.14
JFrog XrayCC7.13
LaceworkCC7.13
MendCC7.13
Nucleus SecurityCC7.14
Ox SecurityCC7.14
PreyCC7.12
Prisma CloudCC7.13
ProbelyCC7.14
PrometheusCC7.21
ProwlerCC7.12
QualysCC7.14
Rapid7 InsightVMCC7.14
SecurityScorecard AtlasCC7.11
SemgrepCC7.14
SnykCC7.14
SocketCC7.13
SonarQubeCC7.14
StackHawkCC7.13
TenableCC7.14
Trend Micro Cloud OneCC7.13
TurbotCC7.11
UpGuard Vendor RiskCC7.12
Uptime RobotCC7.21
VeracodeCC7.14
VictoriaMetricsCC7.21
WizCC7.13
YardstikCC1.41

Evidence by attestation (95)

These systems publish no API for what the tests check. Connect them to record the connection, then attest the result; an accepted attestation counts toward the control.

ConnectorControls
8x8CC6.2, CC6.3
AcunetixCC7.1
AddigyCC6.8, CC7.1
AffinityCC6.2, CC6.3
AirbaseCC6.2, CC6.3
ApiiroCC7.1
Aqua SecurityCC7.1
Arctic WolfCC6.8
ArnicaCC7.1
Blackpoint CyberCC6.8
BugsnagCC6.2, CC6.3
CartaCC6.2, CC6.3
CheckmkCC6.2, CC6.3, CC7.2
CloudanixCC7.1
CohereC1.2, CC6.2, CC6.3, CC6.5
ConcordCC6.2, CC6.3
ContractbookCC6.2, CC6.3
ContractSafeCC6.2, CC6.3
CoreStackCC7.1
CyberArkCC6.1, CC6.2, CC6.3
CynetCC6.8
CyscaleCC7.1
CywareCC7.4
DeepSeekC1.2, CC6.2, CC6.3, CC6.5
DocumensoCC6.2, CC6.3
EdgescanCC7.1
EversignCC6.2, CC6.3
EvisortCC6.2, CC6.3
Foxit eSignCC6.2, CC6.3
FreshsalesCC6.2, CC6.3
GatekeeperCC6.2, CC6.3
GetAcceptCC6.2, CC6.3
GitKrakenCC6.2, CC6.3
GroqC1.2, CC6.2, CC6.3, CC6.5
HoneycombCC7.2
IBM MaaS360CC6.8, CC7.1
IDriveA1.2
JuroCC6.2, CC6.3
KionCC7.1
LastPass SSOCC6.1, CC6.2, CC6.3
Legit SecurityCC7.1
LexionCC6.2, CC6.3
LinkSquaresCC6.2, CC6.3
LookoutCC6.8
MatillionCC6.2, CC6.3
MessageBirdCC6.2, CC6.3
Microsoft 365 CopilotC1.2, CC6.2, CC6.3, CC6.5
NagiosCC7.2
NessusCC7.1
NetdataCC6.2, CC6.3
NextivaCC6.2, CC6.3
OpenVASCC7.1
Orca SecurityCC7.1
pCloudCC6.2, CC6.3
PerplexityC1.2, CC6.2, CC6.3, CC6.5
PhylumCC7.1
PipedreamCC6.2, CC6.3
PlivoCC6.2, CC6.3
PostmarkCC6.2, CC6.3
PrecoroCC6.2, CC6.3
Rapid7 InsightCloudSecCC7.1
Rapid7 InsightConnectCC7.4
RaygunCC6.2, CC6.3
ReplicateC1.2, CC6.2, CC6.3, CC6.5
ResponsiveCC6.2, CC6.3
RightSignatureCC6.2, CC6.3
Rippling MDMCC6.8, CC7.1
RiskReconCC7.1
RudderStackCC6.2, CC6.3
SAP AribaCC6.2, CC6.3
ScalefusionCC6.8, CC7.1
SignableCC6.2, CC6.3
SigneasyCC6.2, CC6.3
SignWellCC6.2, CC6.3
SkribbleCC6.2, CC6.3
Sonrai SecurityCC7.1
SOTI MobiControlCC6.8, CC7.1
SpotDraftCC6.2, CC6.3
StitchCC6.2, CC6.3
StorjC1.1, CC6.1
Stream SecurityCC7.1
Sweet SecurityCC7.1
SwimlaneCC7.4
SysdigCC7.1
Tenable Cloud SecurityCC7.1
Together AIC1.2, CC6.2, CC6.3, CC6.5
TwilioCC6.2, CC6.3
UptycsCC7.1
VonageCC6.2, CC6.3
WallarmCC7.1
YottaA1.2, C1.1, CC6.1, CC6.3, CC6.6, CC7.1, CC7.2
Z.ai (Zhipu GLM)C1.2, CC6.2, CC6.3, CC6.5
ZipCC6.2, CC6.3
Zoho SignCC6.2, CC6.3
Zscaler Posture ControlCC7.1

Controls (34)

ControlTitleAutomated testsConnectors
A1.1Management of processing capacity and use of system components to meet availability objectives718
A1.2Environmental protections, software, data back-up processes, and recovery infrastructure5839
A1.3Testing of recovery plan procedures supporting system recovery37
C1.1Identification and maintenance of confidential information5454
C1.2Disposal of confidential information to meet the entity's objectives related to confidentiality317
CC1.1Commitment to integrity and ethical values40
CC1.2Board independence from management and oversight of internal control10
CC1.3Management structures, reporting lines, authorities and responsibilities317
CC1.4Commitment to attract, develop, and retain competent individuals99
CC1.5Holding individuals accountable for their internal control responsibilities10
CC2.1Obtaining or generating and using relevant, quality information to support internal control628
CC2.2Internal communication of information, including objectives and responsibilities for internal control67
CC2.3Communication with external parties regarding matters affecting the functioning of internal control511
CC3.2Identification and analysis of risks to the achievement of objectives30
CC3.3Consideration of the potential for fraud in assessing risks10
CC3.4Identification and assessment of changes that could significantly affect internal control10
CC4.1Selection, development and performance of ongoing and/or separate evaluations of internal control components33
CC4.2Evaluation and timely communication of internal control deficiencies for corrective action10
CC5.3Deployment of control activities through policies and procedures40
CC6.1Logical access security software, infrastructure, and architectures over protected information assets202131
CC6.2Registration and authorization of users before credentials are issued, and removal of credentials when access is no longer authorized56324
CC6.3Authorization, modification, and removal of access based on roles, least privilege, and segregation of duties75294
CC6.5Discontinuing protections over assets only after data has been removed or recovered533
CC6.6Logical access security measures against threats from sources outside system boundaries8160
CC6.7Restriction and protection of information during transmission, movement, or removal5847
CC6.8Prevention or detection of, and action on, unauthorized or malicious software3471
CC7.1Detection and monitoring of configuration changes that introduce vulnerabilities and of newly discovered vulnerabilities82144
CC7.2Monitoring of system components for anomalies indicative of malicious acts, natural disasters, and errors152103
CC7.3Evaluation of security events to determine whether they are security incidents1564
CC7.4Response to identified security incidents through a defined incident-response program1765
CC7.5Activities to recover from identified security incidents318
CC8.1Authorization, design, development, testing, approval, and implementation of changes4232
CC9.1Risk mitigation activities for potential business disruptions30
CC9.2Assessment and management of risks associated with vendors and business partners93

Frameworks and connectors

How connectors provide evidence for compliance frameworks, which frameworks the automated tests map to, and how to cover any other framework.

ISO/IEC 27001 and connectors

Which connectors provide evidence for ISO/IEC 27001, for which controls, and how to connect them.

On this page

How to connect for this frameworkConnectors with automated evidence (360)Evidence by attestation (95)Controls (34)