Trust-Criteria Coverage
Audit trust-services criteria coverage.
Description
Trust-services criteria define the selected scope of an assurance engagement.
Trust-services criteria define the selected scope of an assurance engagement. Coverage of supplied criterion labels differs from operating effectiveness.1
Audit trust-services criteria coverage.
When to use Trust-Criteria Coverage
Use this tool to audit trust-services criteria coverage.
Prepare the documented facts, aligned totals or expected/observed evidence labels requested. Choose applicable requirements and thresholds separately before interpreting a planning screen.
How to use Trust-Criteria Coverage and understand its results
- Prepare the documented facts, aligned totals or expected/observed evidence labels requested. Choose applicable requirements and thresholds separately before interpreting a planning screen.
- Enter requiredCriteria, assessedCriteria using the field table and calculation rules, then run the tool.
- Read coveragePercent, matched, missing, unexpected. The explanation below defines the units, signs, ordering and any flags or placeholder values.
- If the tool reports an input issue, correct the values and run it again. Apply the stated assumptions when interpreting a successfully returned result.
| Input field | Meaning | Value type; see rules below | Requirement |
|---|---|---|---|
| requiredCriteria | Required trust criteria | list of string | Required |
| assessedCriteria | Assessed criteria | list of string | Required |
Enter requiredCriteria as the nonempty expected list and assessedCriteria as observations, which may be empty. Trim entries, compare case-insensitively using en-US lowercase and collapse duplicates. Return matched/missing expected labels and unexpected observed labels. Output follows first occurrence order with the last duplicate’s trimmed spelling.
coverage%=100matchedUnique/expectedUnique Units, indexing, boundary conditions and exceptional cases are defined in the calculation rules above.
| Output field | Meaning | Value type |
|---|---|---|
| coveragePercent | Coverage (%) | number; minimum: 0; maximum: 100 |
| matched | Matched items | list of string |
| missing | Missing items | list of string |
| unexpected | Unexpected items | list of string |
{
"input": {
"requiredCriteria": [
"alpha",
"beta",
"gamma",
"delta"
],
"assessedCriteria": [
"beta",
"alpha",
"extra"
]
},
"output": {
"coveragePercent": 50,
"matched": [
"alpha",
"beta"
],
"missing": [
"gamma",
"delta"
],
"unexpected": [
"extra"
]
}
}Limitations and assumptions
No official criteria set or SOC opinion is provided. Blank entries are errors; requirements are entirely caller-supplied and items have equal weight.
Numeric inputs, where present, must be finite. Follow the calculation-specific rules for overflow, underflow and exceptional cases. Lists are limited to 100,000 entries; the rules above may require smaller limits. Missing required fields, extra fields, wrong value types and violations of the calculation rules are input errors.
Alternative or Complementary methods
Use CUEC Coverage: Audit complementary user-entity control coverage. For a complementary task, use Subservice Method Selector: Select a subservice-organization reporting method from supplied evidence facts.
References
-
Trust-Criteria Coverage — tool.io
Similar or alternative tools
- CUEC Coverage
Audit complementary user-entity control coverage.
- Subservice Method Selector
Select a subservice-organization reporting method from supplied evidence facts.