Common criteria series CC2: the quality of information that controls rely on, internal communication of responsibilities and awareness, and communication with customers, vendors and other external parties.
Obtaining or generating relevant, quality information to support internal control: identifying information requirements, capturing internal and external data, and keeping it accurate through processing. Covers the reports and system data other controls depend on.
Communicating internal control information inside the organization: responsibilities, objectives, security and privacy awareness, incident reporting channels, separate reporting lines such as whistleblower channels, and information about system boundaries and changes.
Communicating with customers, vendors, regulators and other external parties about matters affecting internal control: commitments, system changes, incident reporting and inbound channels. The outward-facing counterpart to CC2.2.
Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.