SOC 2 System Operations

• CC7.1 Vulnerability and Configuration Monitoring

  To meet its objectives, the entity uses detection and monitoring procedures to identify (1) changes to configurations that result in the introduction of new vulnerabilities, and (2) susceptibilities to newly discovered vulnerabilities.

• CC7.2 Anomaly Detection and Security Event Monitoring

  The entity monitors system components and the operation of those components for anomalies that are indicative of malicious acts, natural disasters, and errors affecting the entity's ability to meet its objectives; anomalies are analyzed to determine whether they represent security events.

• CC7.3 Evaluation of Security Events

  The entity evaluates security events to determine whether they could or have resulted in a failure of the entity to meet its objectives (security incidents) and, if so, takes actions to prevent or address such failures.

• CC7.4 Incident Response Program

  The entity responds to identified security incidents by executing a defined incident-response program to understand, contain, remediate, and communicate security incidents, as appropriate.

• CC7.5 Incident Recovery

  The entity identifies, develops, and implements activities to recover from identified security incidents.

Need help putting this into practice? See our SOC 2 compliance services.