+Documentation and reporting of security incidents

Documentation and reporting of security incidents

After a security incident has been processed, the solution is documented in accordance with the contractual agreements and the report is sent to the affected customers for final acknowledgement or, if applicable, as confirmation.
Additonal CriteriaThe customer can either actively approve solutions or the solution is automatically approved after a certain period.
Information on security incidents or confirmed security breaches is made available to all affected customers.
The contract between the Cloud Service Provider and the cloud customer regulates which data is made available to the cloud customer for his own analysis in the event of security incidents.
Supplementary Information - About the Criteria-

1. Przegląd

Tytuł Norma

1.1 Odwołania

1.2 Zidentyfikowane wymagania

1.3 Powiązane regulacje

2. Zidentyfikowane wymagania

Wymagania
Źródło Wymaganie

3. Powiązane regulacje

Regulacje
Źródło Regulacja