Purpose
To provide ÑÇÖÞAV with guidance to developing and implementing the appropriate activities to take action regarding a detected information security event.
Policy
ÑÇÖÞAV has an Incident Response Plan (IRP) that addresses the processes and procedures to be executed and maintained, to ensure timely response to a detected information security event. Analysis of detected information security events is conducted, by ÑÇÖÞAV, to ensure adequate response and to support recovery activities. Upon detection of an information security event, ÑÇÖÞAV will take the necessary actions to prevent the expansion of an event, to mitigate its effects, and eradicate the incident. Upon mitigation of an information security event, ÑÇÖÞAV will incorporate lessons learned into the Incident Response Plan to improve upon it.
Summary
Description of the incident detection, analysis and response policy of ÑÇÖÞAV including the Incident Response Plan (IRP), Incident Response Communications and containment, eradication and recovery mechanisms.