← SOC 2 Trust Services Criteria in plain English

CC7.4 CC7

System Operations / CC7.4

Responding to confirmed incidents in a planned way

Think of it likeFollowing the fire drill you practised, rather than improvising in the smoke.

In plain English

Confirmed incidents are contained, eradicated and communicated according to a defined response programme, with roles assigned in advance and lessons captured afterwards.

Related CSF, CIS and ISO controls (unofficial mapping)

RC.CO-03RC.CO-04RC.RP-01RC.RP-02RC.RP-03RC.RP-0417.117.217.317.417.517.6A.5.24A.5.25A.5.26A.5.27A.5.28A.6.8