+3.5.1 The relevant entities shall respond to incidents in accordance with documented procedures and in a …

3.5.1 The relevant entities shall respond to incidents in accordance with documented procedures and in a …

Requirement

The relevant entities shall respond to incidents in accordance with documented procedures and in a timely manner.

Guidance

  • Establish a dedicated incident response team comprising employees with the necessary technical expertise and authority to respond effectively to incidents, where appropriate.
  • Define roles and responsibilities within the incident response team, such as incident coordinators, analysts and communication liaisons, where appropriate.
  • Take into account industry-recognised standards when developing the incident response procedures (33).
  • Implement playbooks or runbooks to guide incident response actions for common types of incidents.

Examples of evidence

  • Assignment of roles within the incident response team.
  • Documented standards and/or good practices that are taken into account.
  • Playbooks or incident response plans for common types of incidents.

1. Prezentare generală

Titlu Standard

1.1 Referințe

1.2 Cerințe identificate

1.3 Reglementări asociate

2. Cerințe identificate

Cerințe
Sursă Cerință

3. Reglementări asociate

Reglementări
Sursă Reglementare

Tichete legate

  • ENISA -

    EN: Publications of the European Union Agency for Cybersecurity (ENISA), https://www.enisa.europa.eu/. © European Union Agency for Cybersecurity (ENISA). Unless otherwise noted, licensed under CC BY 4.0. Changes: divided into sections, converted into the GRCA format and linked to the EU legal acts they refer to; images and material of third parties are not reproduced. Only the versions published by ENISA are authoritative.

    DE: Veröffentlichungen der Agentur der Europäischen Union für Cybersicherheit (ENISA), https://www.enisa.europa.eu/. © European Union Agency for Cybersecurity (ENISA). Soweit nicht anders vermerkt, lizenziert unter CC BY 4.0. Änderungen: in Abschnitte aufgeteilt, in das GRCA-Format umgewandelt und mit den EU-Rechtsakten verknüpft, auf die sie sich beziehen; Bilder und Material Dritter werden nicht wiedergegeben. Maßgeblich sind allein die von der ENISA veröffentlichten Fassungen.