+APP.3.2.A20 Appointing Contact Persons [Central Administration] (S)

APP.3.2.A20 Appointing Contact Persons [Central Administration] (S)

An organisation that maintains extensive websites SHOULD designate a contact person for them. Processes, procedures, and persons responsible for problems or security incidents SHOULD be specified.

The organisation SHOULD post a contact option on its website that enables external parties to report security issues to the organisation. The organisation SHOULD define processes for handling external security reports.

1. Vue d’ensemble

1.1 Références

1.2 Exigences identifiées

1.3 Réglementations associées

2. Exigences identifiées

Exigences

3. Réglementations associées

Réglementations

Tickets liés

Liens
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.27 Lack of Resources