4 / 5

Responds to Security Incidents

CC7 — System Operations · Not yet reviewed

Status

○ NOT STARTED ◑ IN PROGRESS ✓ IMPLEMENTED — NOT APPLICABLE

What this control requires

The entity responds to identified security incidents by executing a defined incident response program to understand, contain, remediate, and communicate security incidents, as appropriate.

Details

Risk Level

— LOW MEDIUM HIGH

Control Owner

Next Review Date

Notes — what's been done, what's missing, any gaps