What role does business continuity planning play within the SOC 2 control framework?
-
A
BCP is an optional control required only when customers contractually mandate it
-
B
BCP directly supports the Availability criterion by ensuring systems can withstand and recover from disruptions
-
C
BCP is classified as a financial reporting control evaluated exclusively under SOC 1
-
D
BCP applies only to physical security and falls outside the scope of logical access controls