Learning from information security incidents
A.5.27
-
Last updated
Applicable
Catalog reference
After incidents, capture lessons learned and feed them back into policies, procedures, and controls to reduce the likelihood and impact of recurrence.
Narrative — how we satisfy this requirement
A major incident is followed by a short look back in the monthly ISMS meeting, and a standard format for recording the lessons is still being agreed.