Establish and Maintain an Incident Response Process
17,4: Establish and Maintain an Incident Response Process
Policy defined
Control implemented
Control automated
Control reported
Description
Establish and maintain an incident response process that addresses roles and responsibilities, compliance requirements, and a communication plan. Review annually, or when significant enterprise changes occur that could impact this Safeguard.