Cyber security incidents that do not involve customer data are reported to customers and the public in a timely manner after they occur or are discovered.
Topic
Reporting cyber security incidents to customers and the public
Applicable to
all
History
Dec 2023
Cyber security incidents that do not involve customer data are reported to customers and the public in a timely manner after they occur or are discovered.
A new control recommending cyber security incidents not involving customer data be reported to customers and the public in a timely manner after they occur or are discovered was added.