Skip to content

Latest commit

 

History

History
10 lines (10 loc) · 1.28 KB

p65.md

File metadata and controls

10 lines (10 loc) · 1.28 KB

SOC2 - P6.5

The entity obtains commitments from vendors and other third parties with access to personal information to notify the entity in the event of actual or suspected unauthorized disclosures of personal information The entity obtains commitments from vendors and other third parties with access to personal information to notify the entity in the event of actual or suspected unauthorized disclosures of personal information. Such notifications are reported to appropriate personnel and acted on in accordance with established incident response procedures to meet the entity’s objectives related to privacy.

Remediates Misuse of Personal Information by a Third Party

The entity takes remedial action in response to misuse of personal information by a third party to whom the entity has transferred such information

Reports Actual or Suspected Unauthorized Disclosures

A process exists for obtaining commitments from vendors and other third parties to report to the entity actual or suspected unauthorized disclosures of personal information.

Mapped SCF controls