Demystifying SOC 2 Data Protection Requirements
Concepts such as retention periods, Recovery Time Objective, and RPO are easy to implement via policies, and identification of the assets that require protection could be easier with tag-based policies. If your organization deals with personal data or other forms of covered information, this can be a significant aid.