SOC 2 criteria › CC7 System operations
SOC 2 CC7.4 explained
Identified incidents are responded to through a defined program.
Typical controls that address CC7.4
- Incident response plan
- Tabletop exercises
- Customer notification process
Evidence auditors usually ask for
- Incident response plan
- Tabletop records
- Post-incident reviews
Keep CC7.4 evidence organised
Korrali Trust keeps your policies, controls and evidence in one workspace, and reuses them to answer customer security questionnaires.
Other CC7 criteria
- CC7.1: Configurations and vulnerabilities are monitored to detect new weaknesses.
- CC7.2: System components are monitored for anomalies that could indicate attacks or errors.
- CC7.3: Security events are evaluated to decide whether they are incidents.
- CC7.5: The organization recovers from incidents and restores operations.
Plain-English summary of the 2017 Trust Services Criteria common criteria. Controls and evidence vary by organisation and auditor.