+DER.2.1.A20 Creation of a Dedicated Reporting Office for Security Incidents (H)

DER.2.1.A20 Creation of a Dedicated Reporting Office for Security Incidents (H)

A dedicated office SHOULD be established for reporting security incidents. It SHOULD be guaranteed that the reporting office is available during normal office hours. However, it SHOULD also be possible for employees to report security incidents outside of normal office hours. The reporting office employees SHOULD be adequately trained and aware of issues related to information security. All information on security incidents SHOULD be treated confidentially within the reporting office.

1. Panoramica

1.1 Riferimenti

1.2 Requisiti identificati

1.3 Regolamentazioni correlate

2. Requisiti identificati

Requisiti

3. Regolamentazioni correlate

Regolamentazioni

Ticket collegati

Collegamenti
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.20 Information or Products from an Unreliable Source
blocks G 0.22 Manipulation of Information
blocks G 0.27 Lack of Resources
blocks G 0.29 Violations of Laws or Regulations
blocks G 0.32 Misuse of Authorisation
blocks G 0.45 Data Loss
blocks G 0.46 Loss of Integrity of Sensitive Information