{
  "node_id": "aicpa-soc2-cc-confidentiality",
  "title": "AICPA SOC 2 Trust Services Criteria - Confidentiality Category (C1.1-C1.2)",
  "domain": "Cybersecurity",
  "version": "1.1.0",
  "last_updated": "2026-07-03",
  "bluf": "The AICPA SOC 2 Confidentiality principle requires entities to protect information designated as confidential throughout its lifecycle, from creation to destruction, as committed or agreed. The Confidentiality category comprises criteria C1.1 (the entity identifies and maintains confidential information) and C1.2 (the entity disposes of confidential information), supported by the Logical and Physical Access Controls common criteria CC6.1 through CC6.8, which protect confidential information against unauthorized access and disclosure.",
  "paywall": {
    "status": "LOCKED",
    "unlock_cost_usd": "0.01",
    "skyfire_id": "41779894-ece2-4163-9761-b3b1b76e19b0"
  },
  "crosswalks": {
    "_available_keys": [
      "nist_framework",
      "iso_standard",
      "industry_mapping",
      "ai_overlay_2026"
    ],
    "_note": "Full crosswalk values included in vault response"
  },
  "dependencies": [
    "iso-27001-2022",
    "nist-cybersecurity-framework-2-0",
    "cis-controls-v8",
    "fips-197-advanced-encryption-standard"
  ],
  "primary_citations_count": 7
}