Skip to main content

⭐ Repository → 💼 SOC 2

💼 CC9 Risk Mitigation

  • ID: /frameworks/soc-2/cc9

Description​

Empty...

Similar​

  • Internal
    • ID: dec-b-d12dc6cc

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlagsCompliance
💼 CC9.1 The entity identifies, selects, and develops risk mitigation activities for risks arising from potential business disruptions.2no data
　💼 CC9.1-1 Considers Mitigation of Risks of Business Disruptionno data
　💼 CC9.1-2 Considers the Use of Insurance to Mitigate Financial Impact Risksno data
💼 CC9.2 The entity assesses and manages risks associated with vendors and business partners.13no data
　💼 CC9.2-1 Establishes Requirements for Vendor and Business Partner Engagementsno data
　💼 CC9.2-2 Identifies Vulnerabilitiesno data
　💼 CC9.2-3 Assesses Vendor and Business Partner Risksno data
　💼 CC9.2-4 Assigns Responsibility and Accountability for Managing Vendors and Business Partnersno data
　💼 CC9.2-5 Establishes Communication Protocols for Vendors and Business Partnersno data
　💼 CC9.2-6 Establishes Exception Handling Procedures From Vendors and Business Partnersno data
　💼 CC9.2-7 Assesses Vendor and Business Partner Performanceno data
　💼 CC9.2-8 Implements Procedures for Addressing Issues Identified During Vendor and Business Partner Assessmentsno data
　💼 CC9.2-9 Implements Procedures for Terminating Vendor and Business Partner Relationshipsno data
　💼 CC9.2-10 Obtains Confidentiality Commitments from Vendors and Business Partnersno data
　💼 CC9.2-11 Assesses Compliance With Confidentiality Commitments of Vendors and Business Partnersno data
　💼 CC9.2-12 Obtains Privacy Commitments from Vendors and Business Partnersno data
　💼 CC9.2-13 Assesses Compliance with Privacy Commitments of Vendors and Business Partnersno data