RS.CO-02 Incident notification
Notifying internal and external stakeholders of incidents: breach notification to affected customers, contractual notices to partners, and reports to law enforcement and regulators.
RS.CO Incident response reporting and communication
Incident Response Reporting and Communication: notifying stakeholders and sharing incident information; two Subcategories.
RS.CO-03 Incident information sharing
Sharing incident information with designated stakeholders: secure sharing under agreements, voluntary sharing of attacker TTPs with an ISAC, HR notification for insider activity and leadership updates.
