BIZOPS-53 Incident Communication

What is BIZOPS-53 Incident Communication Control?

Incident communication control is about implementing a process to rapidly notify internal and external stakeholders when an incident occurs. It helps engage all stakeholders when an event occurs.

Available tools in the marketplace

Available templates

TrustCloud has a curated list of templates, internally or externally sourced, to help you get started. Click on the link for a downloadable version:

• Guideline for a communication plan
• An example of Communication plan from GitLab

Control Implementation

To implement this control,

A communication plan should be documented in a procedure or template, which should include:

• Targeted audience: this section should include who will be reached in the event of an incident or event.
• Defining the key messages: this section should include the type of communication that will resonate with the stakeholder. Some examples of key messages
• Creating an outreach plan: this section should include how the message will be delivered to the target audience.
• Notification timeline: This section should define the timeline to notify and communicate the message.
• Creating a plan for ad hoc incidents: this section should include a process for quickly addressing and communicating emergency incidents.

What evidence do auditors look for?

1. A documented template or procedure of your communication plan

Evidence Example

1. A documented template or procedure of your communication plan
   Here are links to examples of a template from Atlassian and an external template.The following screenshot shows an example of an incident communication plan.