Incident Communication
What is Incident Communication?
The structured process of informing stakeholders, regulators, affected parties, and the public about security incidents according to defined protocols.
Terms that appear alongside incident communication
Each of these is named in at least one of the same controls as incident communication. The number is how many controls name both.
- post incident review 3 shared controls
- incident response 3 shared controls
- lessons learned 3 shared controls
- remediation 2 shared controls
- cyber threat 2 shared controls
- threat modeling 2 shared controls
- business continuity 2 shared controls
- incident reporting 2 shared controls
Frameworks that govern incident communication
What the standards actually require on incident communication
Requirements naming incident communication across 6 standards, quoted from the control text.
The incident response plan must include a communications plan specifying the internal and external stakeholders who receive information during response, what is communicated, and that communication to external parties is made only by authorised personnel.
api-1164::RS.CO-3 · RS.CO-3 Incident communications plan with defined recipients, content and authorised external communicators →Maintain two-way communication between developers and deployers for incident reporting, sharing performance insights and coordinating responses to issues.
australia-guidance-for-ai-adoption-2025::3.4.4 · 3.4.4 Keep two-way incident communication between developers and deployers →FedRAMP requires providers to report every suspected or confirmed incident resulting in actual or potential loss of confidentiality, integrity or availability of the service, including impact to federal customer data, within one hour of identification by the p...
fedramp-rev-5::C.8 · C.8 Incident communications →Contracts include communication procedures for cybersecurity incidents. The guide expects contracts to set contact details, the mechanism for reporting and classifying incidents to the entity, and escalation.
saudi-nca-ecc::4-1-2-2 · 4-1-2-2 Incident communication procedures →A communications plan covers internal and external communication, including a secure, out-of-band capability that attackers or insiders cannot monitor, a shared incident status journal, and public relations handled by trained staff with crisis training.
uk-onr-cyber-security-and-information-assurance-csia-for-nuclear-facilities::7.5-COMM · Incident communications →Within their ICT risk management framework, entities keep crisis communication plans to disclose responsibly, at a minimum, major ICT-related incidents and any vulnerabilities to clients, counterparts and, where appropriate, the public;
DORA-Art.14 · Communication →Questions people ask about incident communication
What is Incident Communication?
Why is Incident Communication important for compliance?
Which compliance frameworks address Incident Communication?
Where can I learn more about Incident Communication?
See how Incident Communication applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.