← SOC 2 Trust Services Criteria in plain English

CC6.1 CC6

Logical and Physical Access Controls / CC6.1

Logical access infrastructure that enforces who may reach what

Think of it likeLocks on the internal doors, not just the front one.

In plain English

The organization implements the software and infrastructure that restricts logical access to systems and data, covering identification, authentication, authorization and the protection of credentials and keys.

Related CSF, CIS and ISO controls (unofficial mapping)