SOC for Cybersecurity - Cybersecurity Risk Management Examination
Nature of business, information at risk and objectives (DC1 to DC4) – SOC for Cybersecurity - Cybersecurity Risk Management Examination

SOC for Cybersecurity - Cybersecurity Risk Management Examination DC2: Principal types of sensitive information created, collected, transmitted, used or stored

What does DC2 require?

Describe the main kinds of sensitive information the entity handles: information about individuals protected by law, commitment or expected confidentiality (for example PII, PHI, payment card data); third parties' information requiring protection; and the entity's own information (trade secrets, strategy, financial and operating data) needed to meet its objectives and therefore to be kept confidential, available and intact.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in Nature of business, information at risk and objectives (DC1 to DC4) – SOC for Cybersecurity - Cybersecurity Risk Management Examination

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll SOC for Cybersecurity - Cybersecurity Risk Management Examination controls