+APP.3.2.A20 Appointing Contact Persons [Central Administration] (S)

APP.3.2.A20 Appointing Contact Persons [Central Administration] (S)

An organisation that maintains extensive websites SHOULD designate a contact person for them. Processes, procedures, and persons responsible for problems or security incidents SHOULD be specified.

The organisation SHOULD post a contact option on its website that enables external parties to report security issues to the organisation. The organisation SHOULD define processes for handling external security reports.

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations

Linked Issues

Issuelinks
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.27 Lack of Resources