S/N | Questions | SSE-CMM rating scale | |||||
i | Are incident-handling procedures in place to report and respond to security events throughout the incident lifecycle, including the definition of roles and responsibilities? | 0
| 1
| 2
| 3
| 4
| 5
|
ii | Does your organization has an incident response team in place and is functional? | 0
| 1
| 2
| 3
| 4
| 5
|
iii | Does the organization incident response team aware of legal or compliance requirements surrounding evidence collection? | 0
| 1
| 2
| 3
| 4
| 5
|
iv | I know where to report information security incidents (e.g. viruses, fire, flood, etc.) | 0
| 1
| 2
| 3
| 4
| 5
|