graphgrc

SCF - RSK-07 - Risk Assessment Update

Mechanisms exist to routinely update risk assessments and react accordingly upon identifying new security vulnerabilities, including using outside sources for security vulnerability information.

Mapped framework controls

SOC 2

• CC3.2

Control questions

Does the organization routinely update risk assessments and react accordingly upon identifying new security vulnerabilities, including using outside sources for security vulnerability information?

This site is open source. Improve this page.