+3.1.2. The policy referred to in point 3.1.1 shall be coherent with the business continuity and …
|
3.1.2. The policy referred to in point 3.1.1 shall be coherent with the business continuity and …
|
3.1.2.
|
The policy referred to in point 3.1.1 shall be coherent with the business continuity and disaster recovery plan referred to in point 4.1. The policy shall include:
|
(a)
|
a categorisation system for incidents that is consistent with the event assessment and classification carried out pursuant to point 3.4.1;
|
|
(b)
|
effective communication plans including for escalation and reporting;
|
|
(c)
|
assignment of roles to detect and appropriately respond to incidents to competent employees;
|
|
(d)
|
documents to be used in the course of incident detection and response such as incident response manuals, escalation charts, contact lists and templates.
|
|
1. Resumen
1.1 Referencias
1.2 Requisitos identificados
1.3 Estándares relacionados
2. Requisitos identificados
Requisitos
| Fuente |
Requisito |
3. Estándares relacionados
Estándares
| Fuente |
Requisito |
Incidencias vinculadas
|