Policy, Program and Procedures

 View Only

  • 1.  CUEC Department Procedures

    Posted 06-20-2024 06:46 AM

    Hi,

    Does anyone have a procedure that assists Vendor Owners with filling out their own CUECs?  For example, for each line item in the CUEC's generally the responses refer to a policy or a procedure.  I am struggling with assistance from Vendor Owners on this.  I do have a procedure in place listing the purpose/importance of answering the CUECs along with answering via policy/procedure and if not, determine where it needs to be added or created.. 

    What are others doing to assist with this issue?

    Thanks,

    Kelli



  • 2.  RE: CUEC Department Procedures

    Posted 06-20-2024 06:57 AM

    I am interested in this topic as well, we are struggling with the same issue. We are building a "mapping library" as we go, but would be interested in how others are handling this process as well. 

    Thanks,

    Krysten




  • 3.  RE: CUEC Department Procedures

    Posted 06-20-2024 06:58 AM
      |   view attached
    Good morning,
     
    This is a template that I have used as an auditor for the mapping of a SOC 2, in this example the sub-service organization is Workday.  The CUEC tab I map to Company ABC internal controls to the CUECs in Workday's listing of CUECs seen in the report.
     
    Hope this helps!
     
    Donna
     
    Donna Wilson | Security and Compliance Manager
    Navigate Wellbeing Solutions   |  
     
    CONFIDENTIALITY NOTICE: This e-mail message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information or may otherwise be protected by law. Any unauthorized review, use, disclosure, or distribution is prohibited. If you
are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message and any attachment thereto.
     
     




    Attachment(s)

    xlsx
    Workday SOC Mapping__Draft_9_30_2019.xlsx   37 KB 1 version


  • 4.  RE: CUEC Department Procedures

    Posted 06-20-2024 08:08 AM

    Thank you!

     
    Kelli Shoup | Technology Support Lead/Information Security Specialist

    The Farmers Bank




    Original Message


  • 5.  RE: CUEC Department Procedures

    Posted 06-20-2024 09:22 AM

    Thanks all

     


    USAA Classification: Internal




    Original Message