Information security event reporting
A.6.8
-
Last updated
Applicable
Catalog reference
Provide a clear mechanism for personnel to report observed or suspected information security events promptly, without friction or fear of blame.
Narrative — how we satisfy this requirement
Staff report a suspected security event to the service desk by phone or ticket, and the on-call engineer triages the report.