What AICPA SOC 2 Common Criteria CC8 - Change Management (CC8.1) requires
CC8 is the Change Management series of the SOC 2 Common Criteria. Its single criterion, CC8.1, requires the entity to authorize, design, develop or acquire, configure, document, test, approve, and implement changes to infrastructure, data, software, and procedures to meet its objectives. SOC 2 examinations test whether changes follow this controlled, documented, and approved path.
Pillar: Cybersecurity · Authority: Association of International Certified Professional Accountants (AICPA & CIMA) · Version: 1.0.0 · Last updated:
Primary source: https://www.aicpa-cima.com/resources/landing/2017-trust-services-criteria
SHA-256 integrity: 7c2a36404fbf252260dbb615910e9f2243c5b317445d73659d61780d545e67f5
Primary Citations — 5 traced to source
- AICPA Trust Services Criteria, https://www.aicpa-cima.com/resources/landing/2017-trust-services-criteria, CC8.1, 2017
- AICPA Trust Services Criteria, https://www.aicpa-cima.com/resources/landing/2017-trust-services-criteria, CC6.8, 2017
+ 3 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.
Access
- Discovery (free): /api/v1/nodes/soc2-cc8-change-management.json — 6-field metadata
- Vault (full node): /api/v1/vault/nodes/soc2-cc8-change-management.json — full 13-key payload, $0.01 USDC (L402/Skyfire/Direct Base)
- Canonical URL: https://bidda.com/intelligence/soc2-cc8-change-management
- Back to registry: Browse all 10,085 compliance nodes