Control domain
Incident response & breach notification
Detecting, managing and reporting security incidents and notifying authorities or affected people.
14 requirements across 9frameworks & regulations.
- ISO 27001PartialA.5.26 Response to information security incidents
- NIST 800-53PartialIR-4 Incident handling
- NIST 800-53PartialIR-6 Incident reporting
- NIST 800-171Partial3.6.1 Establish an incident-handling capability
- GLBAPartial§314.4(h) Incident response plan
- NIS2PartialArt. 21(2)(b) Incident handling
- NIS2PartialArt. 23 Reporting obligations
- HIPAAPartial§164.308(a)(6) Security incident procedures
- HIPAARelated§164.404 Notification to individuals
- LGPDRelatedArt. 48 Communication of a security incident