c11.md

SOC2 - C1.1

The entity identifies and maintains confidential information to meet the entity’s objectives related to confidentiality

Identifies Confidential information

Procedures are in place to identify and designate confidential information when it is received or created and to determine the period over which the confidential information is to be retained

Protects Confidential Information from Destruction

Procedures are in place to protect confidential information from erasure or destruction during the specified retention period of the information

Mapped SCF controls

• DCH-01 - Data Protection
• DCH-02 - Data & Asset Classification
• DCH-03 - Media Access