Incident response
Summary
The entity responds to identified security incidents by executing a defined incident response programme to understand, contain, remediate, and communicate security incidents, as appropriate.
system operationsincident response
Read the full official text: https://www.aicpa-cima.com/resources/download/2022-trust-services-criteria
Track SOC 2 criterion CC7.4 as evidence
eurocompliant maps this obligation to a checklist task and the evidence that satisfies it, alongside every other framework you follow.
Start free trial