← All controls
A.5.24 · Organizational
Information security incident management planning and preparation
Why it matters
Deciding roles and steps during a live incident wastes the exact time you can least afford to lose.
How a self-led small team implements it
A one-page incident response plan — who does what, first three steps — beats an elaborate plan nobody's read.
What auditors expect to see
Incident response plan document.
Track A.5.24 in your own Statement of Applicability — mark it applicable, log your justification, and link it to the risk that drove it.
Start your ISMS