graphgrc

SCF - DCH-03.1 - Disclosure of Information

Mechanisms exist to restrict the disclosure of sensitive / regulated data to authorized parties with a need to know.

Mapped framework controls

SOC 2

Control questions

Does the organization restrict the disclosure of sensitive / regulated data to authorized parties with a need to know?