Canada ITSP.10.033 Security and Privacy Controls and Assurance Activities Catalogue IR-02: IR-02 Incident response training

The organisation provides incident response training matched to roles within a set time of taking an incident response role or gaining system access, when system changes require and at a set frequency thereafter, and reviews and updates the content at a set frequency and after defined events. The GC discussion encourages executives to engage their access to information and privacy office or chief privacy officer on privacy breach training. 3 enhancements.