SOC2 Update SOC 2 Incident Response Plan: What Auditors Expect and How to Prove It Works What a SOC 2 incident response plan must cover under CC7.3 to CC7.5, the evidence auditors sample in a Type II period, and how to October 19, 2026