Information security incident management planning and preparation
A.5.24
-
Last updated
Applicable
Catalog reference
Plan and prepare for managing information security incidents — define roles, processes, communication paths, and decision-making authority before an incident occurs.
Narrative — how we satisfy this requirement
The incident runbook lists the Roles, the severity levels, and the contact tree, and the service desk rehearses it at the continuity exercise briefing.