Criterion CC7.4The entity responds to identified security incidents by executing a defined incident-response program to understand, contain, remediate, and communicate security incidents, as appropriate.

What it says

The entity responds to identified security incidents by executing a defined incident-response program to understand, contain, remediate, and communicate security incidents, as appropriate.

SOC 2, the trust services criteria, CC7.4

What is in the packs for this

From SOC 2 Report Readiness. Each one helps with this requirement.

• XLSExcel

  Trust Services Criteria Response Register

  The register has a row for this criterion, for you to write down your own controls, owners and evidence against it. Lists the 61 Trust Services Criteria by number and series title, with blank columns for your own controls, owners and evidence. It makes no coverage claim.
• XLSExcel

  Observation Period & Exceptions Calendar

  Its Framework References cite this criterion. Dates the observation period, the evidence points inside it, any exceptions found and the management responses, and the dates for bridge letters.