Conyac で依頼された翻訳結果を公開

7

A.6.1.3

A.6.1.3. Does the organization maintain appropriate contacts with relevant authorities (Ex. police, government, social infrastructure company) when a trouble or incident occurs?

Appropriate contacts with relevant authorities should be maintained.
--
The organization does not maintain contacts with relevant authorities.

Some departments have identified responsible personnel and authorities to be contacted for reporting of information security incidents.


Departments across the organization have consistently identified responsible personnel and authorities to be contacted for reporting of information security incidents though procedures for contacting authorities has not been defined.


Procedures are available that specify when and by whom authorities should be contacted and how identified information security incidents should be reported in a timely manner.

Maintenance of contacts with authorities for reporting of information security incidents is linked to business continuity and contingency planning processes and reviewed kept up to date.

Contacts with authorities are used to anticipate and prepare for upcoming changes in laws or regulations and policies of authorities which have to be implemented by the organization.