+DER.2.1.A18 Further Development of Processes Based on Findings from Security Incidents and Industry Developments [Process Owner] (S)

DER.2.1.A18 Further Development of Processes Based on Findings from Security Incidents and Industry Developments [Process Owner] (S)

After a security incident has been analysed, there SHOULD be an investigation of whether the procedures for handling security incidents need to be changed or developed further. All those involved in the incident SHOULD report on their respective experiences.

Whether there are new developments in the field of incident management and forensics and whether these can be incorporated into the respective documents and procedures SHOULD be examined.

If checklists and auxiliary resources are being used (e.g. by service desk members), a check SHOULD be carried out on whether these should be complemented by relevant questions and information.

1. Преглед

1.1 Препратки

1.2 Идентифицирани изисквания

1.3 Свързани регулации

2. Идентифицирани изисквания

Изисквания

3. Свързани регулации

Регулации

Свързани задачи

Връзки
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.20 Information or Products from an Unreliable Source
blocks G 0.29 Violations of Laws or Regulations
blocks G 0.45 Data Loss
blocks G 0.46 Loss of Integrity of Sensitive Information