iro-07-integratedsecurityincidentresponseteamisirt.md

SCF - IRO-07 - Integrated Security Incident Response Team (ISIRT)

Mechanisms exist to establish an integrated team of cybersecurity, IT and business function representatives that are capable of addressing cybersecurity & data privacy incident response operations.

Mapped framework controls

GDPR

• Art 34.1
• Art 34.2
• Art 34.3
• Art 34.4

ISO 27002

• A.5.25
• A.5.26

SOC 2

• CC7.4

Control questions

Does the organization establish an integrated team of cybersecurity, IT and business function representatives that are capable of addressing cybersecurity & data privacy incident response operations?