Incident response: every Sev-1 has documented timeline + post-mortem within 7d

SOC2.CC7.OPS · GLOBAL · operational_security

Severity

high

Cadence

weekly

Region

global

Current status (Apollo Gaming Ltd.)

not evaluated

Requirement

Every Sev-1 / Sev-2 incident raised in our incident-ticket system must have a complete timeline and a post-mortem document within 7 days of resolution.

Source: AICPA TSC — CC7 System Operations

Evidence specification

Evidence type	Connector	Spec	Acceptance criteria
`ticket_log`	`ticket-zendesk`	{ "ticket_tag": "incident_sev1_or_2", "required_fields": [ "ticket_id", "opened_at", "resolved_at", "post_mortem_url" ] }	`every resolved ticket has post_mortem_url populated within 7 days of resolved_at`

Recent evaluations (Apollo Gaming Ltd.)

No evaluation history for this control yet.