+3.1.2. The policy referred to in point 3.1.1 shall be coherent with the business continuity and …
|
3.1.2. The policy referred to in point 3.1.1 shall be coherent with the business continuity and …
|
3.1.2.
|
The policy referred to in point 3.1.1 shall be coherent with the business continuity and disaster recovery plan referred to in point 4.1. The policy shall include:
|
(a)
|
a categorisation system for incidents that is consistent with the event assessment and classification carried out pursuant to point 3.4.1;
|
|
(b)
|
effective communication plans including for escalation and reporting;
|
|
(c)
|
assignment of roles to detect and appropriately respond to incidents to competent employees;
|
|
(d)
|
documents to be used in the course of incident detection and response such as incident response manuals, escalation charts, contact lists and templates.
|
|
1. Översikt
1.1 Referenser
1.2 Identifierade krav
1.3 Relaterade standarder
2. Identifierade krav
3. Relaterade standarder
Länkade ärenden
|