Incident management and control is institutionalized as a managed process.
Incident management and control is institutionalized as a managed process.
Establish and maintain governance over the planning and performance of the incident management and control process.
Establish and maintain the plan for performing the incident management and control process.
Provide adequate resources for performing the incident management and control process, developing the work products, and providing the services of the process.
Assign responsibility and authority for performing the incident management and control process, developing the work products, and providing the services of the process.
Train the people performing or supporting the incident management and control process as needed.
Place designated work products of the incident management and control process under appropriate levels of control.
Identify and involve the relevant stakeholders of the incident management and control process as planned.
Measure and control the incident management and control process against the plan for performing the process and take appropriate corrective action.
Objectively evaluate adherence of the incident management and control process against its process description, standards, and procedures, and address non-compliance.