SOC 2 criteria › CC7 System operations
SOC 2 CC7.2 explained
System components are monitored for anomalies that could indicate attacks or errors.
Typical controls that address CC7.2
- Centralized logging and alerting
- Intrusion detection
- Uptime monitoring
Evidence auditors usually ask for
- Alert configurations
- Log retention settings
- Monitoring dashboards
Keep CC7.2 evidence organised
Korrali Trust keeps your policies, controls and evidence in one workspace, and reuses them to answer customer security questionnaires.
Other CC7 criteria
Plain-English summary of the 2017 Trust Services Criteria common criteria. Controls and evidence vary by organisation and auditor.