← SOC 2 Trust Services Criteria in plain English

CC9.1 CC9

Risk Mitigation / CC9.1

Mitigating the risk of business disruption

Think of it likeKeeping a torch and some candles, and knowing where they are.

In plain English

The organization identifies and manages the risk of significant disruption, through business continuity planning and, where appropriate, insurance or other risk transfer.

Related CSF, CIS and ISO controls (unofficial mapping)

GV.OC-01GV.OC-02GV.OC-03GV.OC-04GV.OC-05GV.OV-0111.111.211.5A.5.1A.5.2A.5.29A.5.3A.5.30A.5.35