{
  "node_id": "aicpa-soc2-cc-availability",
  "title": "AICPA SOC 2 Trust Services Criteria - Availability Category (Additional Criteria A1.1-A1.3)",
  "domain": "Cybersecurity",
  "version": "1.1.0",
  "last_updated": "2026-07-03",
  "bluf": "The AICPA SOC 2 Availability Trust Services Category requires an entity to maintain controls ensuring its information and systems are available for operation and use to meet its objectives, as committed or agreed. This is primarily achieved through processing capacity monitoring, environmental protections, data backup processes, recovery infrastructure, and recovery plan testing, as detailed in the additional availability criteria A1.1, A1.2, and A1.3, which supplement the common criteria including the Risk Mitigation criteria CC9.1 and CC9.2.",
  "paywall": {
    "status": "LOCKED",
    "unlock_cost_usd": "0.01",
    "skyfire_id": "41779894-ece2-4163-9761-b3b1b76e19b0"
  },
  "crosswalks": {
    "_available_keys": [
      "nist_framework",
      "iso_standard",
      "industry_mapping",
      "ai_overlay_2026"
    ],
    "_note": "Full crosswalk values included in vault response"
  },
  "dependencies": [
    "nist-800-53-cp2",
    "iso-27001-2022",
    "iso-31000-risk-mgt-std",
    "cyber-nist-csf-2"
  ],
  "primary_citations_count": 5
}