Information security incident management planning and preparation
A.5.24
-
Last updated
Applicable
Catalog reference
Plan and prepare for managing information security incidents — define roles, processes, communication paths, and decision-making authority before an incident occurs.
Narrative — how we satisfy this requirement
The incident runbook lists the Roles, the severity levels, and the contact tree, and the service desk rehearses it at the continuity exercise briefing.
None due within 31 days.