# SOC2 CC3.2

URL: /systems/trust-and-governance/criteria/soc2/cc3-2 · Id: `criterion:soc2:CC3.2`

> The entity identifies risks to its objectives across the entity and analyzes them to decide how to manage them.

The entity identifies risks to its objectives across the entity and analyzes them to decide how to manage them.

| Property | Value |
| --- | --- |
| Framework | SOC2 |
| Reference | `CC3.2` |
| Satisfied by | [Risk assessment](/systems/trust-and-governance/controls/risk-assessment) |