Respond
2.5.2 Communications
Ensure that your response procedures are coordinated with internal and external
stakeholders. Ensure that, should an event occur, you receive support from public-sector
bodies if necessary and appropriate.
Description
Task
RS.CO-1
Ensure that all individuals are familiar with their response and the sequence of their actions if
and when a cybersecurity incident occurs.
RS.CO-2
Define reporting criteria and ensure that cybersecurity incidents are reported and processed
in accordance with these criteria.
RS.CO-3
Share information and findings about detected cybersecurity incidents in accordance with
the defined criteria.
RS.CO-4
Coordinate with all stakeholder groups in accordance with pre-defined criteria.
RS.CO-5
Ensure greater awareness of cybersecurity incidents by sharing information with your partners
on a regular basis.
Table 35: RS.CO events
Standard
Reference
COBIT 5
ISA 62443-3:2013
ISO 27001:2013
A.6.1.3, A.16.1.2
NIST-SP-800-53 Rev. 4
CP-2, CP-3, IR-3, IR-8, CA-2, CA-7, IR-4, IR-8, PE-6, RA-5, SI-4, PM-15, SI-5
BSI
B 1.3, B 1.8, M 2.193
Table 36: RS.CO references
Minimum ICT standard 2018
31
Select target paragraph3
Connect to a paragraph
Connect to an entity
Disable highlights
Add to table of contents