Document Version: 1.0 Last Updated: July 19, 2025 1. Purpose This policy establishes the framework for business continuity and disaster recovery at [Your Company Name], ensuring the organization can continue critical operations and recover from disruptive events with minimal impact. This policy supports compliance with SOC 2 requirements for

Document Version: 1.0 Last Reviewed: July 19, 2025 Owner: Compliance & Risk Officer 1. Purpose This policy defines the framework for assessing, onboarding, and monitoring third-party vendors to ensure their services meet DevSecOpsBook’s security, availability, confidentiality, and privacy obligations as outlined in SOC 2. 2. Scope This policy

Document Version: 1.0 Last Reviewed: July 19, 2025 Owner: Security & Compliance Team 1. Purpose The purpose of this policy is to ensure that DevSecOpsBook maintains adequate logging and monitoring practices to detect, respond to, and investigate security incidents, system failures, and anomalous activities in alignment with SOC 2

Document Version: 1.0 Last Updated: July 19, 2025 SOC 2 Mapping: CC7.1, CC7.2, CC7.3, CC7.4, A1.2 1. Purpose This policy establishes a structured approach to identifying, assessing, prioritizing, remediating, and verifying the resolution of security vulnerabilities across DevSecOpsBook systems, applications, and infrastructure. It ensures

Document Version: 1.0 Last Reviewed: July 19, 2025 Owner: Security Officer 1. Purpose This policy defines the requirements and procedures for identifying, managing, and responding to security incidents to minimize business impact and support timely recovery in accordance with SOC 2 Trust Services Criteria. 2. Scope This policy applies

Document Version: 1.0 Last Updated: July 19, 2025 Owner: Chief Information Security Officer (CISO) 1. Purpose This Information Security Policy establishes the framework for protecting the confidentiality, integrity, and availability of DevSecOpsBook’s systems and data in accordance with SOC 2 Trust Services Criteria. It ensures the implementation of

Document Version: 1.0 Last Updated: July 19, 2025 Policy Owner: Security & Compliance Team 1. Purpose This policy establishes standards and controls to ensure that access to systems, applications, and data is authorized, authenticated, and appropriate for each user’s role. It ensures compliance with SOC 2 Trust Services

Document Version: 1.0 Last Updated: July 19, 2025 Owner: Engineering and Security Teams 1. Purpose To establish standardized procedures for initiating, reviewing, approving, implementing, and documenting changes to information systems, codebases, configurations, infrastructure, and services in order to maintain system integrity, availability, and compliance with SOC 2 requirements. 2.

Document Version: 1.0 Last Updated: July 19, 2025 Owner: Security & Compliance Lead Applicable Controls: CC6.1, CC6.3, CC7.1 1. Purpose This policy defines the requirements for secure access and identity management at DevSecOpsBook. It ensures that access to systems and data is granted based on the

Document Version: 1.0 Last Updated: July 19, 2025 Policy Owner: DevSecOps Lead 1. Purpose This policy defines security controls for the Continuous Integration and Continuous Deployment (CI/CD) infrastructure at DevSecOpsBook to ensure software delivery is secure, auditable, and aligned with SOC 2 requirements. 2. Scope This policy applies