AO
← Controls

CC7.2

Security Monitoring

SOC 2 · Security

Needs Attention
AI

AI explanation

CloudTrail is enabled in three of four regions. Alerting rules exist but there is no documented triage owner.

Remediation

  1. 1Enable CloudTrail in the remaining region
  2. 2Assign an on-call triage owner
  3. 3Document escalation thresholds
  4. 4Re-run automated test

Evidence

  • CloudTrail configuration
  • Alert routing rules
Open evidence library →

Affected systems

AWSSlack