SOC 2 · CC9.2
SOC 2 CC9.2 - vendor & third-party management
This control asks you to show: vendor & third-party management. The AICPA Trust Services Criteria auditors use for security, availability, processing integrity, confidentiality and privacy.
What evidence passes
The check reads the field
vendor_management in the decision or governance record. It passes when that field is set to true (yes, it is in place). Anything else fails, with the reason stated.Check it now
Free, no account. You get PASS or FAIL, the reason, and a tamper-evident receipt.
Run it from your AI assistant
Connect
https://sebbi.pro/mcp to Claude, ChatGPT, Cursor or any MCP app, then call:sebbi_run_check {"check": "sebbi_soc2_018", "record": {"vendor_management": "..."}}Or run every SOC 2 control at once with sebbi_run_framework. How to connect