← SOC 2 Trust Services Criteria in plain English

CC2.3 CC2

Communication and Information / CC2.3

Communicating with the outside parties who need to know

Think of it likeTelling the neighbours the alarm will be tested on Tuesday.

In plain English

The organization communicates relevant matters to customers, vendors, regulators and other external parties, and gives them a way to communicate back, including reporting a security concern.

Related CSF, CIS and ISO controls (unofficial mapping)