IT Management & Cyber Security

In this article explain ISO 27001 Annex : A.16.1.5 Response to Information Security Incidents, A.16.1.6 Learning from Information Security Incidents & A.16.1.7 Collection of Evidence this controls. A.16.1.5 Response to Information Security Incidents Control-   In the context of the documented procedures,  information security incidents  should be responded to. Implementation Guidance-  A nominated point of contact and other pertinent people within the organization or external parties should be able to respond to information security incidents. The following should be included in the response: Gathering evidence as soon as possible after the occurrence; Conduct forensic  security information  analysis where necessary; Escalation, wherein necessary; Ensuring adequate documentation for subsequent analysis of all responses activities involved; Communicate to other internal or external entities or organizations who need to know if an information security inc...