← all controls
CC6.7SOC 2

Logical access - data transmission and disposal

The entity restricts the transmission, movement, and disposal of information to authorized channels.

Trust Service Criterion
CC
Audit period
type-2
Points of focus
  • Sensitive data transfer is encrypted
  • Removable media and exports are controlled
  • Disposal follows retention and destruction requirements