One-way Action windows
A one-way Action waits out its delay window, and an Action over its Limit waits for an Approval.
Satisfies
| Criterion | Text |
|---|---|
| SOC2 CC5.1 | The entity selects and develops control activities that mitigate risks to its objectives to acceptable levels. |
| SOC2 PI1.3 | The entity implements policies and procedures over processing so that it is complete, accurate and timely. |
Implemented by
Test
| Step | Rule |
|---|---|
| Kind | Preventive: it stops the failure before it happens. |
| Select | Every one-way or over-Limit Action in the report period. |
| Assert | Each one-way Action ran after its window closed unpaused, and each over-Limit Action cites an Approval. |
Owner
Example
A domain-purchase Action waits out its 24-hour window. The founder pauses it at hour 20 and cancels it, so no charge runs.