Definitions
Incident
A violation or imminent threat of violation of computer security policies, acceptable use policies, or standard security practices
Incident Response
An organization's structured capability to mitigate the consequences of security incidents by systematically preparing for, detecting, analyzing, containing, eradicating, and recovering from them.
Directive (IR-1 Incident Response)
GNB shall establish, implement, and maintain a formal Incident Response Directive to ensure that cybersecurity incidents are detected, reported, analyzed, contained, eradicated, and recovered from in a timely and coordinated manner.
Purpose
This directive establishes the foundational governance necessary to respond effectively to cybersecurity incidents, minimize operational and security impacts, preserve the integrity of evidence, and support organizational resilience.
The objective of the Incident Response Directive is to ensure that GNB has a standardized approach for security incident response that includes adequate preparation, detection, containment, documentation, response and recovery.
