Create Incident Ticket

None Assign for remediation

Limited Assign for remediation. Notify CIO and IHT on close.

Moderate Initiate full CSIRT, involve the CIO and IHT.

Critical Initiate full CSIRT, CIO, and IHT. Review Disaster Recovery Plans.

None No action required.

Limited Notify data owners to determine the appropriate course of action.

Moderate Notify CIO and IHT to determine the appropriate course of action.

Critical Notify CIO and IHT to determine whether reportable and comply with notification requirements.

Non-Incident Resolve and close ticket.

Sev. 3 revolve and close ticket within 12 hours

Sev. 2 revolve and close ticket within 6 hours

Sev. 1 Initiate within 2 hours.

km