IR-04—External Communication of Incidents

1. Ensure that following details are documented in Incident Response Plan and Standard: • information about external party dependencies • criteria for notification to external parties as required by policy in the event of a security breach • contact information for authorities (e.g., law enforcement, regulatory bodies, etc.) • provisions for updating and communicating external communication requirement changes 2. Establish a process that flags the alerts as the defined escalation metrics.