System operations - incident response

The entity responds to identified security incidents by executing response procedures.

Trust Service Criterion

CC

Audit period

type-2

Points of focus

• Incident response plans are documented
• Roles and communications are defined
• Incident actions are tracked