5.1.2.2
Incident Response Plan – Responsibilities
The incident response plan shall detail who is responsible for handling incidents including any relevant contact information for communicating to external parties, stakeholders and regulators (such as breach counsel), as well as what mechanisms to use for communicating during an incident response. The organization shall have an up-to-date hard copy version of this plan available for situations where soft copies are not available. NOTE: The organization should define a method to contact affected parties (internal and external) in case of an incident.
-
5.6 Contact With Special Interest Groups – The organization must connect with specialized security groups and professional associations.
5.9 Contact With Government Authorities – The organization must stay in contact with relevant authorities.
5.24 Information Security Incident Management Planning and Preperation – Plan for managing security incidents by defining and communicating processes, roles, and responsibilities.
5.25 Assessment and Decision on Information Security Events – The organization should evaluate information security events to determine if they qualify as security incidents.
5.26 Response to Information Security Incidnets – Respond to information security incidents as per the documented procedures.
-
3.6.1 Establish an operational incident-handling capability for organizational systems that includes preparation, detection, analysis, containment, recovery, and user response activities.
3.6.2 Track, document, and report incidents to designated officials and/or authorities both internal and external to the organization.
3.6.3 Test the organizational incident response capability.
-
3.6.1 Establish an operational incident-handling capability for organizational systems that includes preparation, detection, analysis, containment, recovery, and user response activities.
3.6.2 Track, document, and report incidents to designated officials and/or authorities both internal and external to the organization.
3.6.3 Test the organizational incident response capability.