Control cross-reference
Which controls a tabletop speaks to.
The same cross-reference the evidence packet cites, published so you can check it before you buy anything. It maps incident response controls to what an exercise can put on the record, and says where a discussion exercise is not enough.
A cross-reference, not an assessment. We never assert that a control is satisfied.
Frameworks
Pick yours.
-
SOC 2
CC7.4, CC7.5, CC9.2, A1.3
-
ISO/IEC 27001:2022
A.5.24, A.5.26, A.5.27, A.5.29, A.5.30
-
PCI DSS v4.x
12.10.1, 12.10.2, 12.10.4
-
HIPAA Security Rule
164.308(a)(6)(ii), 164.308(a)(7)(ii)(D)