SafeIT

ISMS PROCEDURE

Procedure No: ISM - Email Version: 1

Date: 19/10/22 Authorized :Paul Miser

Title: ISMS POLICY on Incident Management

1. Purpose
The purpose of this document is to state the SafeIt policy on Incident Management
and its application.
2. Responsibilities
The ISM shall remain responsible for maintenance, review and modification of this
policy and its related controls.
3. Policy
Safe IT employee have pre-defined roles and responsibilities which can take priority
over normal duties.
Whenever a security incident, such as a virus, worm, hoax email, discovery of
hacking tools, altered data, etc. is suspected or confirmed, the appropriate Incident
Management procedures must be followed.
The ISM is responsible for initiating the appropriate incident management action
including restoration as defined in the Incident Management Procedures.
The ISM is responsible for determining the physical and electronic evidence to be
gathered as part of the Incident Investigation.
The appropriate technical personnel the SafeIT are responsible for monitoring that
any damage from a security incident is repaired or mitigated and that the vulnerability
is eliminated or minimized where possible.
The ISM, working with the GM Operations, will determine if a widespread SafeIT
communication is required, the content of the communication, and how best to
distribute the communication.
The appropriate technical personnel from SafeIY are responsible for communicating
new issues or vulnerabilities to the system vendor and working with the vendor to
eliminate or mitigate the vulnerability.
The ISM is responsible for initiating, completing, and documenting the incident
investigation with assistance from GM Operations.

IQMSL-IS3-ISMS-LA–IRCA 2348 Page 1 of 2

CASESTUDY 2022

2022 THIS MATERIAL IS THE PROPERTY OF IQMS LEARNING

UNAUTHORISED COPYING OR USE IS PROHIBITED.
 SafeIT
ISMS PROCEDURE

Procedure No: ISM - Email Version: 1

Date: 19/10/22 Authorized :Paul Miser

Title: ISMS POLICY on Incident Management

The [ISM is responsible for reporting the incident to the:
• GM Operations
• SafeIT Top Management
• Stake holders, after due clearance from Yop Management
The JSM is responsible for coordinating communications with outside organizations
and law enforcement.
In the case where law enforcement is not involved, the ISM will recommend
disciplinary actions, if appropriate, to the HR.
In the case where law enforcement is involved, the ISM will act as the liaison between law
enforcement and SafeIT HR.

5, Records
Communication logs and records

IQMSL-IS3-ISMS-LA–IRCA 2348 Page 2 of 2

CASESTUDY 2022

2022 THIS MATERIAL IS THE PROPERTY OF IQMS LEARNING

UNAUTHORISED COPYING OR USE IS PROHIBITED.