Incident & Problem Management
Active Ambassadors in This Topic
Community Posts
I'd like to better understand industry standards for the number of P1 and P2 incidents for a retail company. Would any of you know where I could find these standards?
Who owns Communication in Network vs. Security Incidents? Best Practices & RACI Guidance Needed In many organizations, Network and Security teams both play a role in incident response, especially when firewall or SASE issues impact network performance. When an issue is first diagnosed by the Network team but determined to be security-related, who should own the ongoing communication, resolution updates, and root cause reporting? I’d love to hear from the community: • Are there best practices, ITIL/ITSM frameworks, or RACI models that clarify ownership? • How does your organization handle communication handoffs between Network and Security teams?
Have you put together a cyber security incident response plan flow chart for communications specifically?
Yes40%
Yes, but it needs updating43%
No11%
We're working on one4%
I would like to know what kind of tool, platform or rule/regulation/standard can help IT to define the IT risk management?
Does your org have any designated incident handlers or coordinators who are responsible for communicating with stakeholders during remediation activities?
Yes28%
We're discussing this option41%
No, but that might change21%
No, and I doubt that will change6%
Other (I'll explain via comment)1%
If you had to pick to prioritize your incident response and preparedness efforts, which would it be:
Running crisis management table top exercises77%
Running technical CSIRT table top exercises23%