ISOISO 27001Annex A Controls OverviewEASYFree question
What does control A.5.24 (Information security incident management planning and preparation) require?
- A.Planning and preparing for managing information security incidents by defining processes, roles, and responsibilities
- B.Testing and archiving recovery media for storage sites, including offsite rotation records
- C.Notifying and briefing national regulators about breaches, including media statements
- D.Triaging and escalating helpdesk tickets by priority, including the weekend rota
Why A is correct
A.5.24 requires planning and preparing for incident management, including defining processes, roles, responsibilities, and communication procedures.
Know someone studying for ISO 27001? Send them this one.