conceptsControl categories explainedCC6, CC7, CC8 and the Availability series.CC6 — Logical and Physical AccessCC7 — System Operations and MonitoringCC8 — Change ManagementA1 — Availability PreviousHow SOC2 evidence worksNext Pass / Warn / Fail criteria