Incident Response
IR-01Triage every reported incident and assign its severity the same day
How Leela would run itEvent-driven · each reported or suspected incident, the same business day
From the policy libraryThe requirement
Whoever receives the first report of a suspected incident notifies the Compliance Officer immediately. The Compliance Officer triages it the same business day, assigns one of four severity levels from its impact, scope, and effect on business continuity, opens the incident record, and decides whether the response team is activated. Severity may be raised as facts emerge and is not lowered until containment is confirmed.
- Applies
- Tell Leela about your company to see whether this applies.
- Status
- Setup needed
Tell Leela how you handle it today, or hand it over: see what’s next.
The work
Log the report, classify the severity against the definitions, record the rationale, and activate the response team for any High or Critical incident.
What Leela keepsThe evidence this obligation leaves, as the work happens
Listed from the policy libraryContents
- 01Incident recordTime reported, time triaged, severity, classifier, rationale
- 02Team activation noticeMessage to the response team with the time sent
Evidence
Incident record
Incident Response §2.2, §3.2, §4.1
2
of 2 records
The work and the records come from this obligation in the policy library.