SOC for Cybersecurity - Cybersecurity Risk Management Examination DC14: Process for communicating with external parties about matters affecting the program

What does DC14 require?

Describe external communication: open channels for input from customers, consumers, vendors, partners, auditors, regulators, analysts and others to management and the board; creating and updating external communications; confidential channels; and how legal, regulatory and fiduciary duties, such as mandatory breach and incident notices, are factored into what is said.