CISM - Incident Management - Section 4.10

Manage incident response communications including reporting, notification and escalation to internal and external parties.

Manage incident communications by meeting notification obligations to regulators, affected parties, and internal stakeholders, and by executing escalation procedures to engage the right decision-makers at the right time. Distinguish between regulatory reporting deadlines - which are legally mandated - and internal stakeholder communication, which should be timely but allows more flexibility.

Examworthy is not affiliated with or endorsed by ISACA. Original, blueprint-aligned practice material only.