Rehearse response and assess notifications
Invoke the incident plan, preserve evidence and involve security, legal and accountable executives. Determine regulator and other notification duties, including triggering facts and time limits, using the applicable rule. Record filing decisions and receipts.
Event-driven
At a cybersecurity event and response exercise
Invoke the incident plan, preserve evidence and involve security, legal and accountable executives. Determine regulator and other notification duties, including triggering facts and time limits, using the applicable rule. Record filing decisions and receipts.
- Incident timeline, notification assessment and exercise findings
Controlled record with date, owner, source and review history
Incident commander
A person must do the work; Leela can track it and file the evidence.
A qualified person performs and approves this control; Leela can organize its task and evidence.
Tell Leela about your company to see whether this applies.
Tell Leela how you handle it today, or hand it over: see what’s next.