Inadequate information security incident or event response

Control

Establish a response mechanism and process for when security incidents occur