VULNERABILITY MANAGEMENT POLICY STATEMENTS. Departments shall develop and maintain a vulnerability management process as part of its Cybersecurity Program.
VULNERABILITY MANAGEMENT POLICY STATEMENTS. Departments shall develop and maintain a vulnerability management process as part of its Cybersecurity Program. DocuSign Envelope ID: DFDCCE54-5078-4B9F-8718-13BBD8AD7054 Information Security Incident Management establishes the policy to be used by each department in planning for, reporting on, and responding to computer security incidents. For these purposes an incident is defined as any irregular or adverse event that occurs on a County system or network. The goal of incident management is to mitigate the impact of a disruptive event. To accomplish this goal, an organization establishes processes that: • detect and identify events • triage and analyze events to determine whether an incident is underway • respond and recover from an incident • improve the organization’s capabilities for responding to a future incident This domain defines management controls for addressing cyber incidents. The controls provide a consistent and effective approach to Cyber Incident Response aligned with Orange County’s Cyber Incident Response Plan, to include: • Collection of evidence related to the cyber incident as appropriate • Reporting procedures including any and all statutory reporting requirements • Incident remediation • Minimum logging procedures • Annual testing of the plan
