CC1 - Control Environment

The Control Environment (CC1) is the foundational Trust Services Criterion that evaluates an organization's governance, ethical values, leadership commitment, structure, accountability and policies that set the tone for internal controls. It ensures that the entity establishes and maintains a culture of integrity, competence and responsibility, providing the basis for all other control activities within a SOC 2 examination.