Common Criteria
SOC 2 Trust Services Criteria common to Security and relevant across governance, risk, access, operations, change, and vendors.
In practice
Map controls to CC1–CC9 before adding optional Availability, Confidentiality, Processing Integrity, or Privacy criteria.
Common confusion
SOC 2 Common Criteria are not the ISO/IEC 15408 product-evaluation standard also called Common Criteria.