Incident response and logging · 7 answer guides
How to answer incident response questions in a security questionnaire
Incident response plans, breach notification timelines, detection, and log retention. Buyers often copy these answers straight into the contract. Commit only to what you can actually deliver.
Incident response plan
Describe your incident response plan (IRP).Breach notification SLA
What is your SLA for notifying customers of a security breach?Breach notification procedure
Describe your breach notification procedures.Security incident detection
How do you detect security incidents?Security log retention
How long do you retain security logs?SIEM
What is your SIEM strategy?Clock synchronization
How are the clocks of your processing systems synchronized to a reliable and auditable time source?