SFS 6 / SF 5

Back to SFS 6

Status: Question model review passed; solution and completed SF authoring pending.

This is a generated authoring draft. Human approval and operational assessment results have not been supplied.

Question

Has the organization established documented escalation procedures to notify appropriate personnel within defined timeframes when security incidents are detected during the review period?

Plain-language explanation

Model-reviewed question draft. Completed explanations and a canonical solution are pending. The proposed positive criterion is: Documented escalation procedures specifying time-sensitive notifications to designated personnel for detected security incidents

Assessment criterion and evidence

Actor: organization. Scope: security incident response. Evidence period: review period. Required evidence: Documented escalation procedures with defined timeframes; Incident response records demonstrating timely personnel notifications. Negative criterion: Absence of defined escalation procedures or evidence of untimely incident notifications. Missing evidence: Pending verification due to unavailable documentation or incomplete records

View the JSON record (opens in a new tab).

Assessment result: unset.