RS.CO-02 Internal and external stakeholders are notified of incidents

Statement

Internal and external stakeholders are notified of incidents

Guidance

Follow the organization's breach notification procedures after discovering a data breach incident, including notifying affected customers

Guidance

Notify business partners and customers of incidents in accordance with contractual requirements

Guidance

Notify law enforcement agencies and regulatory bodies of incidents based on criteria in the incident response plan and management approval

1. Overview

1.1 References

• 3.3 Event reporting
• 3.5 Incident response
• 4.3 Crisis management

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

3. Related Regulations

Linked Issues

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final