3.4. Event assessment and classification

(a)

carry out the assessment based on predefined criteria laid down in advance, and on a triage to determine prioritisation of incident containment and eradication;

(b)

assess the existence of recurring incidents as referred to in Article 4 of this Regulation on a quarterly basis;

(c)

review the appropriate logs for the purposes of event assessment and classification;

(d)

put in place a process for log correlation and analysis, and

(e)

reassess and reclassify events in case of new information becoming available or after analysis of previously available information.