|
Detection
|
• Review information on incidents received from the suppliers. Measure the downtime imposed on the organzations services from the supplier's incident per type of incident and service. |
|
Crisis management process
|
• Review information on incidents received from the suppliers. Measure the downtime imposed on the organzations services from the supplier's incident per type of incident and service.
|
|
Crisis management
|
• Measure the estimated time for the implementation of the incident response procedures.
• Review the documented information security incidents and measure the amount of time needed before reaching a decision per incident type and service.
• Review the documented information security incidents and measure the amount of time the service was dirupted per type of incident and service.
• Measure the types, volumes and costs in terms of down time of information security incidents.
• Review existing legislation regarding collection of evidence and measure the amount of time that the system needs to be availabel for the collection of evidence by the relevant authorities. |
|
Disaster recovery management
|
• Review the documented information security incidents and measure the amount of time needed before reaching a decision per incident type and service.
• Review existing legislation regarding collection of evidence and measure the amount of time that the system needs to be availabel for the collection of evidence by the relevant authorities. |