Topic

Reporting cyber security incidents to customers and the public

Applicable to

all

History

Dec 2023

Cyber security incidents that involve customer data are reported to customers and the public in a timely manner after they occur or are discovered.

A new control recommending cyber security incidents involving customer data be reported to customers and the public in a timely manner after they occur or are discovered was added.