SOC for Cybersecurity - Cybersecurity Risk Management Examination
Nature of business, information at risk and objectives (DC1 to DC4) – SOC for Cybersecurity - Cybersecurity Risk Management Examination

SOC for Cybersecurity - Cybersecurity Risk Management Examination DC3: Principal cybersecurity objectives for availability, confidentiality, integrity of data and integrity of processing

What does DC3 require?

Describe the entity's main cybersecurity objectives across availability, confidentiality, data integrity and processing integrity, typically reflecting commitments to customers and partners, applicable laws and regulations, certification or authorisation commitments, industry standards (such as payment card standards) and other initiatives; objectives should reflect the entity's specific risks and may be framed against its risk appetite. DC 200 gives example objectives under each of the four headings.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in Nature of business, information at risk and objectives (DC1 to DC4) – SOC for Cybersecurity - Cybersecurity Risk Management Examination

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll SOC for Cybersecurity - Cybersecurity Risk Management Examination controls