p63.md

SOC2 - P6.3

The entity creates and retains a complete, accurate, and timely record of detected or reported unauthorized disclosures (including breaches) of personal information to meet the entity’s objectives related to privacy

Creates and Retains Record of Detected or Reported Unauthorized Disclosures

The entity creates and maintains a record of detected or reported unauthorized disclosures of personal information that is complete, accurate, and timely.

Mapped SCF controls

• IRO-04.1 - Data Breach
• IRO-10 - Incident Stakeholder Reporting
• IRO-12 - Information Spillage Response
• PRI-14.1 - Accounting of Disclosures