The process for responding to and recovering from incidents is established.
The process for responding to and recovering from incidents is established.
Incidents are escalated to the appropriate stakeholders for input and resolution.
A response to a declared incident is developed and implemented to prevent or limit organizational impact.
A plan for the communication of incidents to relevant stakeholders and a process for managing ongoing incident communications are established.
Incidents are closed after relevant actions have been taken by the organization.
Lessons learned from identifying, analyzing, and responding to incidents are translated into actions to improve strategies for protecting and sustaining services and assets.
Post-incident review is performed to determine underlying causes.
The lessons learned from incident management are analyzed and translated into improvements.
The operational resilience management system supports and enables achievement of the specific goals of the Incident Management and Control process area by transforming identifiable input work products to produce identifiable output work products.
Perform the specific practices of the Incident Management and Control process area to develop work products and provide services to achieve the specific goals of the process area.