Skip to main content

💼 CC7.4 The entity responds to identified security incidents by executing a defined incident-response program to understand, contain, remediate, and communicate security incidents, as appropriate.

  • Contextual name: 💼 CC7.4 The entity responds to identified security incidents by executing a defined incident-response program to understand, contain, remediate, and communicate security incidents, as appropriate.

  • ID: /frameworks/soc-2/cc7/04

  • Located in: 💼 CC7 System Operations

Description​

Empty...

Similar​

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlags
💼 CC7.4-1 Assigns Roles and Responsibilities
💼 CC7.4-2 Contains and Responds to Security Incidents
💼 CC7.4-3 Mitigates Ongoing Security Incidents
💼 CC7.4-4 Resolves Security Incidents
💼 CC7.4-5 Restores Operations
💼 CC7.4-6 Develops and Implements Communication Protocols for Security Incidents
💼 CC7.4-7 Obtains Understanding of Nature of Incident and Determines Containment Strategy
💼 CC7.4-8 Remediates Identified Vulnerabilities
💼 CC7.4-9 Communicates Remediation Activities
💼 CC7.4-10 Evaluates the Effectiveness of Incident Response
💼 CC7.4-11 Periodically Evaluates Incidents
💼 CC7.4-12 Applies Breach Response Procedures
💼 CC7.4-13 Communicates Unauthorized Use and Disclosure
💼 CC7.4-14 Application of Sanctions