💼 CC7.3-6 Assesses the Impact on Personal Information

• Contextual name: 💼 CC7.3-6 Assesses the Impact on Personal Information
• ID: /frameworks/soc-2/cc7/03/06
• Located in: 💼 CC7.3 The entity evaluates security events to determine whether they could or have resulted in a failure of the entity to meet its objectives (security incidents) and, if so, takes actions to prevent or address such failures.

Description

Detected security events are evaluated to determine whether they could or did result in the unauthorized disclosure or use of personal information and whether there has been a failure to comply with applicable laws or regulations.

Similar

• Internal
  • ID: dec-c-196f3b1c

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags