Enterprise Security Assessment > Risk and Security Management > Incident Event and Communications Management

Did you establish an Incident Management Policy?

book reader icon
1 Minute
11/08/2024
facebook logo gray
linkedin logo gray
mail logo gray

Yes. QR Planet's Incident Management Policy has been developed in accordance with common best practices and approved by management. It was communicated to all relevent Constituents. Management and appropriate consultants maintain the policy and review it regularly to keep it up to current standards.

Last update 1 week ago

Is sufficient detail contained in Web Server and application logs to support incident investigation?

Next to our Audit Trail Logs, our Web Servers' and applications' logs are sufficiently detailed to support any necessary incident investigation.

Do you have a formal Incident Response Plan in place?

Yes, but without an escalation matrix. The Incident Response Plan defines actions to be taken in case of information security events.

Do your network device logs proviode sufficient detail to support incident investigations?

Yes. In accordance with our Network Security Policy, logs are retained for as long and in such detail as indicated by all relevant compliance requirements.

Do your Operating System and application logs contain sufficient detail to support security incident investigations?

We offer comprehensive logs for all accounts, and also keep logs for all access attempts to our web servers for two weeks, including all IP addresses used.