+3.6. Post-incident reviews
---+3.6.1. Where appropriate, the relevant entities shall carry out post-incident reviews after …
---+3.6.2. The relevant entities shall ensure that post-incident reviews contribute to improving their …
---+3.6.3. The relevant entities shall review at planned intervals if incidents led to post-incident …

3.6. Post-incident reviews

3.6.   Post-incident reviews

1. Visão geral

,
3.6.1. Where appropriate, the relevant entities shall carry out post-incident reviews after …

3.6.1.

 Where appropriate, the relevant entities shall carry out post-incident reviews after recovery from incidents. The post-incident reviews shall identify, where possible, the root cause of the incident and result in documented lessons learned to reduce the occurrence and consequences of future incidents.
3.6.2. The relevant entities shall ensure that post-incident reviews contribute to improving their …

3.6.2.

 The relevant entities shall ensure that post-incident reviews contribute to improving their approach to network and information security, to risk treatment measures, and to incident handling, detection and response procedures.
3.6.3. The relevant entities shall review at planned intervals if incidents led to post-incident …

3.6.3.

 The relevant entities shall review at planned intervals if incidents led to post-incident reviews.

1.1 Referências

1.2 Requisitos identificados

1.3 Normas relacionadas

2. Requisitos identificados

Requisitos

3. Normas relacionadas

Normas

Pedidos ligados

Ligações
is related to 3.6 Post-incident reviews