+DER.2.1.A9 Definition of Reporting Paths for Security Incidents (S)

DER.2.1.A9 Definition of Reporting Paths for Security Incidents (S)

Reporting channels SHOULD be established that are appropriate to the different types of security incidents. These SHOULD ensure that employees can report security incidents quickly and easily using reliable and trustworthy channels.

If a central contact point for reporting failures or security incidents is established, this SHOULD also be communicated to all employees.

There SHOULD be a communication and contact strategy. This strategy SHOULD specify who must be informed as a matter of principle, who may be informed, who is responsible for handling this and in what order, and the level of detail of the information provided. It SHOULD specify who will pass information about security incidents on to third parties. It SHOULD ensure that no unauthorised persons forward information on security incidents.

1. Forbhreathnú

1.1 Tagairtí

1.2 Ceanglais aitheanta

1.3 Rialacháin ghaolmhara

2. Ceanglais aitheanta

Ceanglais

3. Rialacháin ghaolmhara

Rialacháin

Saincheisteanna nasctha

Naisc
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.20 Information or Products from an Unreliable Source
blocks G 0.22 Manipulation of Information
blocks G 0.27 Lack of Resources
blocks G 0.29 Violations of Laws or Regulations
blocks G 0.33 Shortage of Personnel