⭐ Repository → 💼 SOC 2 → 💼 CC7 System Operations
💼 CC7.4 The entity responds to identified security incidents by executing a defined incident-response program to understand, contain, remediate, and communicate security incidents, as appropriate.
- ID:
/frameworks/soc-2/cc7/04
Description
Empty...
Similar
Sub Sections
Section | Sub Sections | Internal Rules | Policies | Flags | Compliance |
---|---|---|---|---|---|
💼 CC7.4-1 Assigns Roles and Responsibilities | no data | ||||
💼 CC7.4-2 Contains and Responds to Security Incidents | no data | ||||
💼 CC7.4-3 Mitigates Ongoing Security Incidents | no data | ||||
💼 CC7.4-4 Resolves Security Incidents | no data | ||||
💼 CC7.4-5 Restores Operations | no data | ||||
💼 CC7.4-6 Develops and Implements Communication Protocols for Security Incidents | no data | ||||
💼 CC7.4-7 Obtains Understanding of Nature of Incident and Determines Containment Strategy | no data | ||||
💼 CC7.4-8 Remediates Identified Vulnerabilities | no data | ||||
💼 CC7.4-9 Communicates Remediation Activities | no data | ||||
💼 CC7.4-10 Evaluates the Effectiveness of Incident Response | no data | ||||
💼 CC7.4-11 Periodically Evaluates Incidents | no data | ||||
💼 CC7.4-12 Applies Breach Response Procedures | no data | ||||
💼 CC7.4-13 Communicates Unauthorized Use and Disclosure | no data | ||||
💼 CC7.4-14 Application of Sanctions | no data |