+3.1.2. The policy referred to in point 3.1.1 shall be coherent with the business continuity and …
|
3.1.2. The policy referred to in point 3.1.1 shall be coherent with the business continuity and …
|
3.1.2.
|
The policy referred to in point 3.1.1 shall be coherent with the business continuity and disaster recovery plan referred to in point 4.1. The policy shall include:
|
(a)
|
a categorisation system for incidents that is consistent with the event assessment and classification carried out pursuant to point 3.4.1;
|
|
(b)
|
effective communication plans including for escalation and reporting;
|
|
(c)
|
assignment of roles to detect and appropriately respond to incidents to competent employees;
|
|
(d)
|
documents to be used in the course of incident detection and response such as incident response manuals, escalation charts, contact lists and templates.
|
|
1. Vue d’ensemble
| Intitulé |
Réglementation |
,
1.1 Références
1.2 Exigences identifiées
1.3 Normes associées
2. Exigences identifiées
Exigences
| Source |
Exigence |
3. Normes associées
Tickets liés
|