ISMS monthly meeting 3

Agenda: the debrief of the ransomware tabletop exercise.

Discussion: the walkthrough of the Ransomware recovery plan went as intended, but two gaps came up. Nobody could say who decides when customers are told, and the contact list for the colocation provider was out of date. The order in which servers are restored was not written down. There are no open Findings, Incidents, or Vulnerabilities.

Decision: Lotte van Dijk renews the contact lists. Roos van Beek writes the restore order into the plan. Sam de Vries names Kasper Hoogland as the one who decides on customer notice.