+DER.2.1.A5 Remedial Action in Connection with Security incidents [IT Operation Department] (B)

DER.2.1.A5 Remedial Action in Connection with Security incidents [IT Operation Department] (B)

In order for a security incident to be remedied successfully, the person responsible MUST initially contain the problem and find the cause. They MUST then select the safeguards necessary to fix the problem. The head of the IT Operation Department MUST approve the safeguards before they are implemented. The cause MUST then be eliminated and a secure state established.

There MUST be a current list of internal and external security experts who may be consulted in the event of security incidents to answer questions from the subject areas involved. Secure communication methods with these internal and external entities MUST be established.

1. Panoramica

1.1 Riferimenti

1.2 Requisiti identificati

1.3 Regolamentazioni correlate

2. Requisiti identificati

Requisiti

3. Regolamentazioni correlate

Regolamentazioni

Ticket collegati

Collegamenti
blocks G 0.11 Failure or Disruption of Service Providers
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.25 Failure of Devices or Systems
blocks G 0.27 Lack of Resources
blocks G 0.29 Violations of Laws or Regulations