SOC 2 CC7.1: What Auditors Actually Ask For in Vulnerability Management

Your SOC 2 Type II audit is scheduled. Somewhere in the auditor's request list is a line that looks harmless: "Provide evidence of your vulnerability management process, including identification, prio...