SOC 2 CC1.2 - Some Guidance Needed

I'm preparing for a SOC 2 Type 1 audit and the auditor provided some custom controls we've imported into Drata and I'm a bit confused by this one:

>Description

>The company's board of directors has a documented charter that outlines its oversight responsibilities for internal control.

>Question

>Does the organization have a documented charter that outlines oversight responsibilities for internal control?

>Activities

>Create, or ensure that there is, a documented charter outlining the board of director's oversight responsibilities for internal …

audit auditor board control controls custom cybersecurity directors drata guidance internal organization oversight question responsibilities soc soc 2 the company