Security Incident Management IT Standard

Appropriate information security controls reduce the likelihood and impact of security incidents. The purpose of this standard is to set out the rules for timely and effective handling of information security incidents. An information security incident is a suspected or confirmed violation of the integrity, availability, or confidentiality of Company IT assets. The outcome of an information security incident could be financial, availability, or reputational loss to Company. Security incidents can originate from intentional (deliberate actions against information) or unintentional actions. An information security incident is any violation of the Company’s IT Security Policy.

The purpose of this standard is to set out for all users of Information and Communication Technology resources – including (but not limited to) staff (including casuals and volunteers), consultants and contractors, third parties, agency staff, associates, and visitors to Company.

Nowadays, with the digitalization of our society, the need for data protection became more important. The latest IT Security Standards involve the application of technology to broader social and institutional contexts, and thereby contributes to the servitization of companies, and affects how they compete and interact. This document contains security technology solutions to protect data classified as “Highly Sensitive”, “Sensitive”, “Private” or “Public” as per the Data Classification Standard and Data Handling Guidelines. Specifically: