RS.CO-03 Information is shared with designated internal and external stakeholders

Statement

Information is shared with designated internal and external stakeholders

Example

Securely share information consistent with response plans and information sharing agreements

Example

Voluntarily share information about an attacker's observed TTPs, with all sensitive data removed, with an Information Sharing and Analysis Center (ISAC)

Example

Notify HR when malicious insider activity occurs

Example

Regularly update senior leadership on the status of major incidents

Example

Follow the rules and protocols defined in contracts for incident information sharing between the organization and its suppliers

Example

Coordinate crisis communication methods between the organization and its critical suppliers

1. Přehled

1.1 Odkazy

1.2 Identifikované požadavky

1.3 Související regulace

2. Identifikované požadavky

3. Související regulace

Propojené úkoly

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final