Make the failure visible and assign an owner to resolve it. Record the affected systems, the last successful collection, the missing period, and whether the underlying control continued operating. Use an approved manual collection method where feasible and retain the explanation with the evidence. After repairing the connection, reconcile what was recovered rather than assuming a successful sync filled every gap. Review permissions and credential handling as part of the fix. A collection outage and a control failure are different problems, but either can affect audit evidence if the team does not notice and respond.
Related: SOC 2 audit and compliance hub.
Further reading: NIST automated control-assessment guidance; NIST control-assessment guidance.
