Incident handling

Every organisation faces an incident sooner or later. What matters is what you've arranged beforehand: do you know who's responsible for what, and do you spot an incident in time?

What this means in practice

You approve a policy for handling incidents and assign roles and authorities for during an incident. You arrange detection, logging and monitoring of suspicious events, register incidents through a fixed procedure, and rehearse the reporting process so it works when you actually need it.

Why this is in the law

Detection and a rehearsed process decide whether you can report an incident within the statutory deadlines — discovering it late means reporting it late by definition.