← SOC 2 Trust Services Criteria in plain English

CC6.8 CC6

Logical and Physical Access Controls / CC6.8

Preventing and detecting unauthorized software

Think of it likeNot letting strangers install things in your house, and noticing if they did.

In plain English

Controls prevent or detect the introduction of unauthorized or malicious software, through allowlisting, endpoint protection and integrity checks on what is running.

Related CSF, CIS and ISO controls (unofficial mapping)

DE.CM-01DE.CM-09PR.IR-01PR.PS-01PR.PS-0510.110.210.310.410.510.6A.5.14A.8.1A.8.19A.8.23A.8.27A.8.7