+3.1.2. The policy referred to in point 3.1.1 shall be coherent with the business continuity and …

3.1.2. The policy referred to in point 3.1.1 shall be coherent with the business continuity and …

3.1.2.

The policy referred to in point 3.1.1 shall be coherent with the business continuity and disaster recovery plan referred to in point 4.1. The policy shall include:

(a)

a categorisation system for incidents that is consistent with the event assessment and classification carried out pursuant to point 3.4.1;

(b)

effective communication plans including for escalation and reporting;

(c)

assignment of roles to detect and appropriately respond to incidents to competent employees;

(d)

documents to be used in the course of incident detection and response such as incident response manuals, escalation charts, contact lists and templates.

1. Yleiskatsaus

,
Otsikko Sääntely

1.1 Viittaukset

1.2 Tunnistetut vaatimukset

1.3 Liittyvät standardit

2. Tunnistetut vaatimukset

Vaatimukset
Lähde Vaatimus

3. Liittyvät standardit

Standardit
Lähde Vaatimus

Linkitetyt tehtävät