← SOC 2 Trust Services Criteria in plain English

CC2.1 CC2

Communication and Information / CC2.1

Obtaining information good enough to run the controls on

Think of it likeReading the actual thermometer rather than guessing whether the room feels warm.

In plain English

The organization gathers or generates information that is relevant and of sufficient quality to support internal control. Controls fed by stale or wrong data fail quietly.

Related CSF, CIS and ISO controls (unofficial mapping)