SOC 2 CC3.1: Specifying Suitable Objectives
Agree on the result before assessing the risk A software company completes every scheduled backup and reports that its recovery program is working. During a customer discussion, the team discovers that people have different expectations. Sales expects the service to return within a few hours. Engineering has planned for a
