Incident Response Plan
What is Incident Response Plan?
A documented set of instructions that outlines an organisation's procedures for detecting, responding to, and recovering from security incidents. Required by frameworks including ISO 27001, NIST CSF, PCI DSS, and HIPAA.
Terms that appear alongside incident response plan
Each of these is named in at least one of the same controls as incident response plan. The number is how many controls name both.
- security incident 24 shared controls
- lessons learned 20 shared controls
- nist 19 shared controls
- cybersecurity 16 shared controls
- breach notification 11 shared controls
- integrity 10 shared controls
- incident reporting 10 shared controls
- remediation 9 shared controls
Frameworks that govern incident response plan
What the standards actually require on incident response plan
Requirements naming incident response plan across 6 standards, quoted from the control text.
Systems have a cyber security incident response plan that covers the following: - guidelines on what constitutes a cyber security incident - the types of cyber security incidents likely to be encountered and the expected response to each type - how to report c...
ISM-0043 · Systems have a cyber security incident response plan that covers the following: - guidelin →An incident response plan exists and is ready to be activated in the event of a suspected or confirmed security incident, covering roles, responsibilities, communication, containment, and recovery.
12.10.1 · Incident response plan →The incident response plan is executed in coordination with relevant third parties once an incident is declared
NIST-CSF-RS.MA-01 · The incident response plan is executed in coordination with relevant third parties once an incident is declared →Develop and maintain processes and plans for responding to security incidents on cloud platforms, accounting for the shared responsibility model and how it varies across infrastructure, platform and software service models.
ASBv3-IR-1 · Preparation - update incident response plan and handling process →Maintain and exercise written incident response plans covering IT and OT scenarios.
CPG-7.B · Incident Response Plans →Maintain an approved security incident response plan that names the internal departments, affected cloud customers and business-critical relationships such as the supply chain that may be drawn in.
CCM-SEF-03 · Incident Response Plans →Questions people ask about incident response plan
What is Incident Response Plan?
Why is Incident Response Plan important for compliance?
Which compliance frameworks address Incident Response Plan?
Where can I learn more about Incident Response Plan?
See how Incident Response Plan applies across compliance frameworks
Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.