T8.2.6 - INCIDENT RESPONSE ASSISTANCE Implementation Guidance
The entity shall provide an incident response support resource to offer advice and assistance in case of an incident.
Back to T8.2.6 - P4 - INCIDENT RESPONSE ASSISTANCE
The entity should provide an incident response support resources as part of its incident response capability to provide advice and assistance to users of the information system during steady state operation and incidents for the detection, handling and reporting of security incidents.
The entity should provide an incident response support resources in different forms to reach the widest audience, such as:
- Informative website
- Online knowledge base
- Call center, etc.
Moreover, the entity should coordinate with external providers (for example, national CERT) through its incident response capability for help in the detection and handling of incidents within the entity
