Incident Management

What is it, and why is it important?

Responding to an incident, whether it is security-related or operation-related, can help determine the resiliency of an organization. If the organization is not equipped to quickly address and contain a threat, it can raise many more issues. Many compliance frameworks highlight the importance of a strong incident management process to identify, triage, resolve, and report incidents.

It is imperative for each organization to define what an incident is and the various types of incidents that can occur. In general, the definition of an incident is a violation or the threat of a violation of your security policy.

You must define the action steps to address the violation. Action steps can vary based on the type of incident and scope of damage.

Some compliance regulations, such as GDPR and HIPAA, dictate that some incidents must be reported; therefore, the incident management process must include action steps to report relevant incidents.

How do I implement an incident management program?

At TrustCloud, a set of controls is created to help implement an incident management program. Review each article below to learn more about these controls.