IRO-04
Incident Response Plan (IRP)
Description
Mechanisms exist to maintain and make available a current and viable Incident Response Plan (IRP) to all stakeholders.
Control Question
Does the organization maintain and make available a current and viable Incident Response Plan (IRP) to all stakeholders?
Control Metadata
Domain:
Incident Response
Validation Cadence:
Annual
Evidence Request List:
E-IRO-01
Framework Mappings
This control maps to the following compliance frameworks
APRA CPS234
232425(a)25(b)
MAS TRM
7.7.3(a)7.7.3(b)7.7.3(c)12.3.112.3.212.3.3
HKIA GL20
4.14.24.35.15.25.35.45.55.65.76.16.2