Australian Information Security Manual ISM-0137: Legal advice before allowing intrusions to continue

What else in your programme already covers this

This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in Guidelines for cyber security incidents

• ISM-0120 Access to data sources and tools
• ISM-0123 Reporting incidents to the CISO
• ISM-0125 Maintaining a cyber security incident register
• ISM-0133 Handling and containing data spills
• ISM-0138 Maintaining the integrity of evidence
• ISM-0140 Reporting incidents to ASD
• ISM-0576 Incident management policy and response plan
• ISM-0917 Handling malicious code infections