What AICPA SOC 2 Common Criteria CC9 - Risk Mitigation (CC9.1-CC9.2) requires
CC9 is the Risk Mitigation series of the SOC 2 Common Criteria (CC9.1-CC9.2). It requires the entity to identify, select, and develop risk mitigation activities for risks arising from potential business disruptions, and to assess and manage risks associated with vendors and business partners. CC9 covers business continuity and third-party risk management within the Common Criteria.
Pillar: Cybersecurity · Authority: Association of International Certified Professional Accountants (AICPA & CIMA) · Version: 1.0.0 · Last updated:
Primary source: https://www.aicpa-cima.com/resources/landing/2017-trust-services-criteria
SHA-256 integrity: e2c73dd09aa4362cb9ff3ef0bfc2e160f93b5ae8374b226469f047f450a88213
Primary Citations — 5 traced to source
- AICPA Trust Services Criteria, https://www.aicpa-cima.com/resources/landing/2017-trust-services-criteria, CC9.1, 2017
- AICPA Trust Services Criteria, https://www.aicpa-cima.com/resources/landing/2017-trust-services-criteria, CC9.2, 2017
+ 3 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.
Access
- Discovery (free): /api/v1/nodes/soc2-cc9-risk-mitigation.json — 6-field metadata
- Vault (full node): /api/v1/vault/nodes/soc2-cc9-risk-mitigation.json — full 13-key payload, $0.01 USDC (L402/Skyfire/Direct Base)
- Canonical URL: https://bidda.com/intelligence/soc2-cc9-risk-mitigation
- Back to registry: Browse all 10,085 compliance nodes