Incident Response
IR-09Log every incident and keep the records for seven years
How Leela would run itContinuous · each incident at detection; records kept seven years from closure
From the policy libraryThe requirement
Every incident, at any severity, is recorded in the incident log with the time of detection, the severity and type, a description, the response actions and their timeline, the root cause, forensics findings where applicable, the remediation and lessons-learned items, and every regulatory and sponsor bank notification made. Incident records are retained for at least seven years and are available to the independent auditor and to the sponsor bank’s compliance reviews.
- Applies
- Tell Leela about your company to see whether this applies.
- Status
- Setup needed
Tell Leela how you handle it today, or hand it over: see what’s next.
The work
Open the log entry at detection, complete each field as the incident proceeds, close it with the notifications made, and hold the record under the retention schedule.
What Leela keepsThe evidence this obligation leaves, as the work happens
Listed from the policy libraryContents
- 01Incident logOne entry per incident with every required field completed
- 02Retention schedule entryRecord class, seven-year period keyed to closure, location
Evidence
Incident log
Incident Response §10
2
of 2 records
The work and the records come from this obligation in the policy library.