Business disruption risk mitigation
Summary
The entity identifies, develops, and implements activities to mitigate risk arising from potential business disruptions.
risk mitigationbusiness continuitydisaster recovery
Read the full official text: https://www.aicpa-cima.com/resources/download/2022-trust-services-criteria
← Criterion CC8.1
Change authorisation and testing
Criterion CC9.2 →
Vendor and business partner risk management
Track SOC 2 criterion CC9.1 as evidence
eurocompliant maps this obligation to a checklist task and the evidence that satisfies it, alongside every other framework you follow.
Start free trial