CC2.3

External communication with relevant parties

SecurityPartialStale reviewSecurity (Common Criteria)

AICPA Trust Services Criteria

The entity communicates with external parties regarding matters affecting the functioning of internal control.

How this is tested during the audit

Auditor inspects the public trust portal, the customer security disclosure process, and breach-notification SLAs in MSAs.

1 item attached to this control

Last reviewed

195d

Stale — reset before audit

Evidence on file

VP Engineering

Accountable for design + operating effectiveness

Recent control history