What to Provide
Security incident monitoring policy. This policy should cover the processes and procedures for tracking, logging, evaluating, resolving, and communicating security events and incidents.
Screenshots demonstrating that your incident response policies and procedures are shared with the organization (or a selected group of authorized users).
Evidence Format
Word/PDF document, exported images in a common image file type (i.e. .jpg, .png, .pdf), Excel/.csv export from the source system
Associated Unified Control ID | Associated Framework Control |
CTRL-423 | REQ-48 |