RC.CO-03.358

Does your organization have documented procedures for securely sharing recovery information and restoration progress with stakeholders during incident response?

Explanation

During a security incident or disaster recovery scenario, it's critical that appropriate stakeholders receive timely updates about recovery efforts while ensuring sensitive information remains protected. This question assesses whether your organization has formalized how recovery information is shared, with whom, through what secure channels, and at what frequency during an incident response.As evidence, you could provide a section of your incident response plan that specifically outlines recovery information sharing protocols, including designated communication channels, authorized spokespersons, information classification guidelines for recovery data, and templates for status updates that balance transparency with security considerations.

Implementation Example

Securely share recovery information, including restoration progress, consistent with response plans and information sharing agreements

ID: RC.CO-03.358

Context

Function
RC: RECOVER
Category
RC.CO: Incident Recovery Communication
Sub-Category
Recovery activities and progress in restoring operational capabilities are communicated to designated internal and external stakeholders

ResponseHub is the product I wish I had when I was a CTO

Previously I was co-founder and CTO of Progression, a VC backed HR-tech startup used by some of the biggest names in tech.

As our sales grew, security questionnaires quickly became one of my biggest pain-points. They were confusing, hard to delegate and arrived like London busses - 3 at a time!

I'm building ResponseHub so that other teams don't have to go through this. Leave the security questionnaires to us so you can get back to closing deals, shipping product and building your team.

Signature
Neil Cameron
Founder, ResponseHub
Neil Cameron