Description
The Stage 1 audit looked at the Cbw reporting duties for significant incidents and saw that the incident process describes a report to the authority only for personal data breaches. The Cbw adds its own early warning and notification steps, each with its own deadline. The lead auditor suggested mapping these duties onto the incident process, so that the Incident Coordinator can see which clock applies.