Control Objective
What is Control Objective?
A statement of the desired result or purpose to be achieved by implementing a control. Control objectives define what the organisation wants to achieve through its control activities and provide the basis for control design and assessment.
Frameworks that govern control objective
What the standards actually require on control objective
Requirements naming control objective across 6 standards, quoted from the control text.
The description states the specified control objectives and, under each, the controls designed to achieve it; in a type 2 report the same objectives and controls appear again in the tests and results section with the auditor's tests and findings against each c...
soc-1-ssae-18::B.7 · SOC 1 B.7 State the control objectives and the controls designed to achieve them →The department specifies standardised security control objectives, mapped to the business needs for security, that guide the selection and tailoring of controls, drawing on the objectives in the TBS directive and sources such as ISO 27001 Annex A, and defines...
canada-itsg-33-it-security-risk-management::A1-4.2.6 · 4.2.6 Specify security control objectives →Set fraud control objectives for relevant functions and levels. They fit the policy, are measurable where practical, take account of applicable requirements, are achievable, monitored, communicated and updated as needed, and are available as documented informa...
iso-37003-2025::6.2 · Fraud control objectives and planning to achieve them →A typical access control system aims to: let authorised people, materials and vehicles into controlled areas; detect, minimise and stop attempted entry or exit by unauthorised people, vehicles or materials;
ansi-asis-pap-1-2012-physical-asset-protection::B.5.1 · B.5.1 Entry and access control objectives and the three identification factors →Derive control objectives from compliance, regulatory and business requirements, document them, and trace each to implemented AWS controls with measurable validation.
SEC01-BP03 · Identify and validate control objectives →Controllers and processors must implement measures giving security appropriate to the risk, in particular for sensitive data. For automated processing, and where applicable manual filing systems, they must after a risk evaluation implement controls for equipme...
albania-law-no-124-2024-on-personal-data-protection::66 · Article 66: security of law enforcement processing, with ten control objectives →Questions people ask about control objective
What is Control Objective?
Why is Control Objective important for compliance?
Which compliance frameworks address Control Objective?
Where can I learn more about Control Objective?
See how Control Objective applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.