Skip to content

Escalation Procedure

What is Escalation Procedure?

A defined process for elevating issues, incidents, or decisions to higher levels of authority when they exceed current handling capability.

Governance

Frameworks that govern escalation procedure

COBIT 2019View framework →ISO 27001:2022View framework →NIST Cybersecurity Framework 2.0View framework →

What the standards actually require on escalation procedure

Requirements naming escalation procedure across 6 standards, quoted from the control text.

FFIEC IT Examination Handbook1 control

Communication and escalation procedures. Control from FFIEC IT Examination Handbook framework, domain: FFIEC IT Examination Handbook: Operational Resilience.

FFIEC-15 · Communication and escalation procedures →
PCI P2PE1 control

Communication and escalation procedures. Control from PCI P2PE framework, domain: PCI P2PE: Operational Resilience.

PCI-P2PE-15 · Communication and escalation procedures →
PCI PIN Security1 control

Communication and escalation procedures. Control from PCI PIN Security framework, domain: PCI PIN Security: Operational Resilience.

PCI-PIN-15 · Communication and escalation procedures →
PCI SSF1 control

Communication and escalation procedures. Control from PCI SSF framework, domain: PCI SSF: Operational Resilience.

PCI-SSF-15 · Communication and escalation procedures →
HKMA Cyber Resilience Assessment Framework (C-RAF)2 controls

HKMA C-RAF Domain 1 GOVERNANCE + Domain 2 IDENTIFICATION. DOMAIN 1 GOVERNANCE (5 sub-areas): (1) CYBER RISK GOVERNANCE - board + senior management oversight + governance structure + reporting lines + delegation; board cyber-risk literacy + training;

HKMA-CRAF-Domain1-2-Governance-Identification · HKMA C-RAF Domain 1 (Governance) + Domain 2 (Identification) - Cyber Strategy, Risk Management, Asset Management, Threat Assessment →
IRM Enterprise Risk Management Framework (Institute of Risk Management)2 controls

The IRM Risk Architecture + Strategy + Protocols (RASP) framework defines the governance + structural + behavioural enabling elements of effective enterprise risk management.

IRM-Architecture-Strategy-Protocols-Appetite-Culture-Board-Audit-Committee-CRO-Three-Lines · IRM RASP - Risk Architecture + Strategy + Protocols + Risk Appetite Statement + Risk Culture + Board + Audit Committee + Chief Risk Officer + Three Lines of Defence + Tone at the Top →

Questions people ask about escalation procedure

What is Escalation Procedure?
A defined process for elevating issues, incidents, or decisions to higher levels of authority when they exceed current handling capability.
Why is Escalation Procedure important for compliance?
Escalation Procedure is a key concept in Governance. Understanding escalation procedure helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 686 frameworks with 311K cross-framework control mappings.
Which compliance frameworks address Escalation Procedure?
Escalation Procedure appears in the requirement text of FFIEC IT Examination Handbook, PCI P2PE, PCI PIN Security, PCI SSF, HKMA Cyber Resilience Assessment Framework (C-RAF). Across these standards we have identified 8 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Escalation Procedure?
Explore our compliance framework pages to see how escalation procedure applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 686 frameworks.

See how Escalation Procedure applies across compliance frameworks

Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.