# SOC2 CC3.1

URL: /systems/trust-and-governance/criteria/soc2/cc3-1 · Id: `criterion:soc2:CC3.1`

> The entity specifies objectives precisely enough to identify and assess the risks that relate to them.

The entity specifies objectives precisely enough to identify and assess the risks that relate to them.

| Property | Value |
| --- | --- |
| Framework | SOC2 |
| Reference | `CC3.1` |
| Satisfied by | [Risk assessment](/systems/trust-and-governance/controls/risk-assessment) |