3.6.1 Establish an incident-handling capability

Mapped across 13 provisions

Equivalent and related requirements in other frameworks and regulations.

• DORAPartialCurated
  Art. 17 ICT-related incident management process

  Incident response & breach notification

• DORAPartialCurated
  Art. 19 Reporting of major ICT-related incidents

  Incident response & breach notification

• GDPRRelatedCurated
  Art. 33 Notification of a personal data breach to the supervisory authority

  Incident response & breach notification

• GLBAPartialCurated
  §314.4(h) Incident response plan

  Incident response & breach notification

• HIPAAPartialCurated
  §164.308(a)(6) Security incident procedures

  Incident response & breach notification

• HIPAARelatedCurated
  §164.404 Notification to individuals

  Incident response & breach notification

• ISO 27001PartialCurated
  A.5.24 Information security incident management planning and preparation

  Incident response & breach notification

• ISO 27001PartialCurated
  A.5.26 Response to information security incidents

  Incident response & breach notification

• LGPDRelatedCurated
  Art. 48 Communication of a security incident

  Incident response & breach notification

• NIS2PartialCurated
  Art. 21(2)(b) Incident handling

  Incident response & breach notification

• NIS2PartialCurated
  Art. 23 Reporting obligations

  Incident response & breach notification

• NIST 800-53PartialCurated
  IR-4 Incident handling

  Incident response & breach notification

• NIST 800-53PartialCurated
  IR-6 Incident reporting

  Incident response & breach notification