SOC2 Readiness

• Ensure S3 buckets have custom backup schedule configured
• Ensure EFS storage have backup schedule configured
• Ensure FSx Lustre has backup schedule configured
• Ensure FSx for Windows File System has backup schedule configured
• Ensure the RDS storage has retention enabled

SOC 2 controls in the Availability family.

• SOC 2 A1.1 — Monitoring and Managing System Capacity
• SOC 2 A1.2 — Management of Backup, Recovery, and Environmental Controls

SOC 2 controls in the Common Criteria (Security) family.

• SOC 2 CC1.1 — Commitment to Integrity and Ethical Values
• SOC 2 CC1.2 — Board Independence and Oversight

SOC 2 controls in the Confidentiality family.

• SOC 2 C1.1 — Confidential Information Identification and Maintenance
• SOC 2 C1.2 — Confidential Information Disposal

SOC 2 controls in the Privacy family.

• SOC 2 P1.1 — Privacy Notice to Data Subjects
• SOC 2 P2.1 — Communication of Data Subject Choices and Consequences

SOC 2 controls in the Processing Integrity family.

• SOC 2 PI1.2 — Input Controls
• SOC 2 PI1.3 — Processing Controls

Plain-English overview of the framework.

• SOC 2 — overview