Controls

Controls is the register of the SOC 2 control objectives the institution commits to -- security, availability, confidentiality and processing-integrity measures -- each tracked for status and ownership. It frames what the institution must prove and ties each control to its evidence. Compliance leads use it to manage readiness across the trust criteria.

Workflow

Open MFI > Configuration > Tools > SOC 2 > Controls
Review the registered control objectives and owners
Open a control to see its description and status
Link the relevant evidence collected for it
Track gaps and assign remediation owners

Fields reference

Every field on this screen, drawn from the live data model.

Field	Type	Required	Description
Collector `collector`	Text	—	Name of the method on mfi.soc2.evidence that collects evidence for this control (e.g. 'collect_mfa_coverage').
Name `name`	Text	Yes	Name
Code `code`	Text	Yes	Code
Tsc `tsc`	Choice: Common Criteria, Availability, Confidentiality, Processing Integrity, Privacy	Yes	Tsc
Description `description`	Long text	—	Description
Cadence `cadence`	Choice: Daily, Weekly, Monthly, Quarterly	—	Cadence
Active `active`	Yes/No	—	Active

Notes & rules

Model mfi.soc2.control -- control register
Key fields: control objective, owner, status
Related: Evidence, Audit Logs
Used by compliance and security leads

Technical model: mfi.soc2.control · Record: SOC 2 control

Was this page helpful?