Topic

Cyber security incident management policy

Applicable to

all

History

Sep 2023

The cyber security incident management policy, including the associated cyber security incident response plan, is exercised at least annually.

References to ‘incident response plan’ were replaced with ‘cyber security incident response plan’.

Sep 2023

The cyber security incident management policy, including the associated cyber security incident response plan, is exercised at least annually.

References to ‘incident management’ were replaced with ‘cyber security incident management’.

Sep 2022

The incident management policy, including the associated incident response plan, is exercised at least annually.

A new control was added covering exercising the incident management policy, including the associated incident response plan, at least annually.