Security Response Plan Policy Template

This security response plan policy template has 0 pages and is a MS Word file type listed under our human resources documents.

Sample of our security response plan policy template:

SECURITY RESPONSE PLAN POLICY OVERVIEW A Security Response Plan (SRP) is designed to coordinate security and operational teams in their crisis response (detection or exploitation of security vulnerability) and to integrate their efforts in terms of awareness and communication. By requiring business units to incorporate an SRP as part of their business continuity activities and as new products or services are developed and prepared for marketing to consumers, they ensure that, when an incident occurs, prompt mitigation and correction measures are taken. PURPOSE The purpose of this policy is to establish requirements for the development and maintenance of a security response plan for all business units supported by Information Security Team employees. This policy is also intended to provide the Security Incident Management Team with all the information necessary to formulate an effective response to a specific security incident. APPLICABILITY This policy applies to all business units or entities within [COMPANY NAME]. POLICY The development, implementation and execution of a Security Response Plan (SRP) is the responsibility of the business unit for which the SRP is being developed in collaboration with the Information Security Team. [COMPANY NAME] expects business units to adequately facilitate the SRP for the service or products for which they are responsible. The Business Unit Security Coordinator must also work with the Information Security Organizational Unit to develop and update a Security Response Plan. Service or Product Description The product description in an SRP must clearly define the service or application to be deployed with particular attention to data flows, logic diagrams and architecture. Contact Information The SRP must include contact information for team members who will be available outside of business hours if a technological incident occurs and an escalation is required. The SRP document must include all telephone numbers and e-mail addresses of the specialized team members