Processing Integrity

The processing integrity category ensures that service organizations provide services in a complete, accurate, and timely manner. The processing integrity category is especially important if a service organization provides financial or e-commerce services and are concerned with transactional integrity.

The processing integrity category consists of the complete set of common criteria, as well the following additional criteria:

• Does the service organization use and communicate relevant, quality information, regarding the business objectives related to processing, to support the use of its products and services? • Does the service organization implement policies and procedures over system inputs? • Does the service organization implement policies and procedures over system processing? • Does the service organization implement policies and procedures so that output is available or delivered in a complete, accurate, and timely manner? • Does the service organization implement policies and procedures to store inputs, items in processing, and outputs in a complete, accurate, and timely manner?