SOC 2 Type II – Control Mapping
Diese Seite zeigt für SOC 2 Type II, welche Wombat Controls welche Anforderungen dieses Rahmenwerks abdecken.
| Framework-Control | Anforderung | Wombat Controls | Schweregrad | Säule | Kategorie |
|---|---|---|---|---|---|
A1.2 – Failover and recovery |
A1.2 – Failover and recovery |
🟠 |
Reliability |
backup-recovery |
|
C1.1 – Confidentiality |
C1.1 – Confidentiality |
🔴 |
Security |
identity-access |
|
C1.1 – Confidentiality of information |
C1.1 – Confidentiality of information |
🟠 |
Security |
identity-access |
|
CC4.1 – Monitoring activities |
CC4.1 – Monitoring activities |
WAF-AGN-030 · WAF-AGN-040 · WAF-AGN-050 · WAF-AGN-060 · WAF-AGN-070 · WAF-AGN-080 · WAF-AGN-090 · WAF-AGN-100 · WAF-SEC-090 · WAF-SEC-160 |
🟠 🟡 🟢 |
Agentic, Security |
identity-access, logging-monitoring, reliability-design |
CC6.1 – Logical access controls |
CC6.1 – Logical access controls |
🟠 |
Agentic |
agentic-governance |
|
CC6.1 – Logical access security |
CC6.1 – Logical access security |
WAF-AGN-020 · WAF-AGN-050 · WAF-AGN-080 · WAF-SEC-020 · WAF-SEC-030 · WAF-SEC-060 |
🔴 🟠 |
Agentic, Security |
agentic-governance, identity-access, logging-monitoring |
CC6.1 – Logical and physical access controls |
CC6.1 – Logical and physical access controls |
🔴 🟠 |
Agentic, Security |
identity-access |
|
CC6.2 – Provisioning and removal of access |
CC6.2 – Provisioning and removal of access |
🔴 🟠 |
Agentic, Security |
identity-access |
|
CC6.3 – Authentication mechanisms |
CC6.3 – Authentication mechanisms |
🔴 |
Security |
identity-access |
|
CC6.3 – Authorisation and segregation of duties |
CC6.3 – Authorisation and segregation of duties |
🔴 🟠 |
Agentic, Security |
agentic-governance, identity-access |
|
CC6.3 – Role-based access control |
CC6.3 – Role-based access control |
🔴 |
Sovereign Cloud |
identity-access |
|
CC6.6 – Logical access |
CC6.6 – Logical access |
🔴 |
Sovereign Cloud |
identity-access |
|
CC6.6 – Network access boundaries |
CC6.6 – Network access boundaries |
🟠 |
Security |
network-security |
|
CC6.6 – Protection of data in transit |
CC6.6 – Protection of data in transit |
🟠 |
Security |
identity-access |
|
CC6.6 – Security infrastructure and software |
CC6.6 – Security infrastructure and software |
🟠 |
Security |
network-security |
|
CC6.6 – System hardening |
CC6.6 – System hardening |
🟠 |
Security |
identity-access |
|
CC7.1 – Detect and Monitor – Vulnerability and Threat Detection |
CC7.1 – Detect and Monitor – Vulnerability and Threat Detection |
🟠 |
Operational Excellence |
logging-monitoring |
|
CC7.1 – Infrastructure and software monitoring |
CC7.1 – Infrastructure and software monitoring |
WAF-AGN-030 · WAF-AGN-040 · WAF-AGN-060 · WAF-AGN-070 · WAF-AGN-090 · WAF-AGN-100 · WAF-SEC-090 |
🟠 🟡 🟢 |
Agentic, Security |
identity-access, logging-monitoring, reliability-design |
CC7.1 – System monitoring |
CC7.1 – System monitoring |
🟠 |
Security |
identity-access |
|
CC7.1 – System monitoring – vulnerability detection |
CC7.1 – System monitoring – vulnerability detection |
🟡 |
Security |
container-security |
|
CC7.1 – Vulnerability detection |
CC7.1 – Vulnerability detection |
🟠 |
Security |
container-security |
|
CC7.2 – Evaluation of system changes |
CC7.2 – Evaluation of system changes |
🟡 |
Security |
identity-access |
|
CC7.2 – System anomaly detection |
CC7.2 – System anomaly detection |
🟠 |
Security |
identity-access |
|
CC7.2 – System monitoring |
CC7.2 – System monitoring |
🟠 |
Security |
logging-monitoring, network-security |
|
CC7.4 – Detection and monitoring of security events |
CC7.4 – Detection and monitoring of security events |
🟠 |
Security |
identity-access |
|
CC7.4 – Detection of security events |
CC7.4 – Detection of security events |
🟡 |
Security |
identity-access |
|
CC7.4 – Security incident response |
CC7.4 – Security incident response |
🟠 |
Sovereign Cloud |
identity-access |
|
CC7.5 – Incident response |
CC7.5 – Incident response |
🟡 |
Security |
identity-access |
|
CC8.1 – Change Management – Authorized Changes |
CC8.1 – Change Management – Authorized Changes |
🟠 🟡 |
Operational Excellence |
deployment-automation, logging-monitoring |
|
CC8.1 – Change management |
CC8.1 – Change management |
🟡 |
Security |
container-security |
|
CC9.1 – Risk Mitigation Activities |
CC9.1 – Risk Mitigation Activities |
🟡 |
Operational Excellence |
identity-access |
|
CC9.2 – Risk Assessment and Communication |
CC9.2 – Risk Assessment and Communication |
🟡 |
Operational Excellence |
data-governance |
|
CC9.2 – Vendor and business partner management |
CC9.2 – Vendor and business partner management |
🟠 |
Security |
container-security |
|
P1 – Privacy criteria |
P1 – Privacy criteria |
🟠 |
Security |
identity-access |