SEF: Security Incident Management, E-Discovery, & Cloud Forensics

Establish, document, approve, communicate, apply, evaluate and maintain policies and procedures for Security Incident Management, E-Discovery, and Cloud Forensics. Review and update the policies and procedures at least annually.

Establish, document, approve, communicate, apply, evaluate and maintain policies and procedures for the timely management of security incidents. Review and update the policies and procedures at least annually.

Establish, document, approve, communicate, apply, evaluate and maintain a security incident response plan, which includes but is not limited to: relevant internal departments, impacted CSCs, and other business critical relationships (such as supply-chain) that may be impacted.

Test and update as necessary incident response plans at planned intervals or upon significant organizational or environmental changes for effectiveness.

Establish and monitor information security incident metrics.

Define, implement and evaluate processes, procedures and technical measures supporting business processes to triage security-related events.

Define and implement, processes, procedures and technical measures for security breach notifications. Report security breaches and assumed security breaches including any relevant supply chain breaches, as per applicable SLAs, laws and regulations.

Maintain points of contact for applicable regulation authorities, national and local law enforcement, and other legal jurisdictional authorities.