Leela
Insurance information security
IS-04
Draft

Rehearse response and assess notifications

Requirement

Invoke the incident plan, preserve evidence and involve security, legal and accountable executives. Determine regulator and other notification duties, including triggering facts and time limits, using the applicable rule. Record filing decisions and receipts.

Trigger

Event-driven

At a cybersecurity event and response exercise

Action

Invoke the incident plan, preserve evidence and involve security, legal and accountable executives. Determine regulator and other notification duties, including triggering facts and time limits, using the applicable rule. Record filing decisions and receipts.

Evidence
  • Incident timeline, notification assessment and exercise findings

    Controlled record with date, owner, source and review history

Owner

Incident commander

Leela can
Human required

A person must do the work; Leela can track it and file the evidence.

A qualified person performs and approves this control; Leela can organize its task and evidence.

Applies

Tell Leela about your company to see whether this applies.

Status
Setup needed

Tell Leela how you handle it today, or hand it over: see what’s next.

What’s next?