3.5.1 The relevant entities shall respond to incidents in accordance with documented procedures and in a …

Requirement

The relevant entities shall respond to incidents in accordance with documented procedures and in a timely manner.

Guidance

• Establish a dedicated incident response team comprising employees with the necessary technical expertise and authority to respond effectively to incidents, where appropriate.
• Define roles and responsibilities within the incident response team, such as incident coordinators, analysts and communication liaisons, where appropriate.
• Take into account industry-recognised standards when developing the incident response procedures (33).
• Implement playbooks or runbooks to guide incident response actions for common types of incidents.

Examples of evidence

• Assignment of roles within the incident response team.
• Documented standards and/or good practices that are taken into account.
• Playbooks or incident response plans for common types of incidents.

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

3. Related Regulations

Linked Issues

• ENISA -