+DER.2.1.A4 Notification of Entities Affected by Security Incidents [Top Management, IT Operation Department, Data Protection Officer, BCM Officer] (B)

DER.2.1.A4 Notification of Entities Affected by Security Incidents [Top Management, IT Operation Department, Data Protection Officer, BCM Officer] (B)

When a security incident occurs, all the internal and external entities affected MUST be informed of the incident promptly. In this process, it MUST be checked whether the Data Protection Officer, the works council and personnel council, and employees from the legal department must be consulted. The reporting duties for public authorities and regulated industries MUST be taken into consideration, as well. Furthermore, it MUST be guaranteed that the entities affected are informed of the actions they need to take.

1. Resumen

1.1 Referencias

1.2 Requisitos identificados

1.3 Regulaciones relacionadas

2. Requisitos identificados

Requisitos

3. Regulaciones relacionadas

Regulaciones

Incidencias vinculadas

Vínculos
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.20 Information or Products from an Unreliable Source
blocks G 0.29 Violations of Laws or Regulations