Incident management

• A procedure for detecting ICT-related incidents exists.
• Incident severity classification criteria are defined.
• A notification process to the competent authorities is in place.
• Reporting deadlines and templates (initial, intermediate, final) are defined.
• An internal register of all ICT-related incidents is maintained.
• A lessons-learned review is carried out after every major incident.

← Previous phase: Technical measures