+APP.3.2.A20 Appointing Contact Persons [Central Administration] (S)

APP.3.2.A20 Appointing Contact Persons [Central Administration] (S)

An organisation that maintains extensive websites SHOULD designate a contact person for them. Processes, procedures, and persons responsible for problems or security incidents SHOULD be specified.

The organisation SHOULD post a contact option on its website that enables external parties to report security issues to the organisation. The organisation SHOULD define processes for handling external security reports.

1. Översikt

1.1 Referenser

1.2 Identifierade krav

1.3 Relaterade regleringar

2. Identifierade krav

Krav

3. Relaterade regleringar

Regleringar

Länkade ärenden

Länkar
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.27 Lack of Resources