Content library

Information security incident and improvement management

16.1

ISO 27017

When offering cloud services, the organisation needs to have planned processes or procedures for:

how the cloud service customer reports an information security event to the organisation
how the organisation reports information security events to cloud service customers
how the cloud service customer can track the status of a previously reported information security event

See an example process description from task's page

16: Information security incident management

ISO 27017

16.1: Information security incident and improvement management

ISO 27017

16.1.2: Reporting information security events

ISO 27017

ID.RA-3: Threat identification

NIST CSF

DE.DP-4: Event detection

NIST CSF

No items found.