GM1 IS.I.OR.215(a)&(b) Information security internal reporting scheme

• ED Decision 2023/009/R found in: Information Security (2023/203 and 2022/1645) Part-IS (Jun 2024)

GM1 IS.I.OR.215(a)&(b) Information security internal reporting scheme ED Decision 2023/009/R RELATIONSHIP BETWEEN INTERNAL AND EXTERNAL REPORTING Organisations should collect and report internally incidents and vulnerabilities aiming at covering all items within the scope of this Regulation. Both internal and external reporting are necessary for a complete and effective reporting system. Internal reports should be assessed in a timely manner and where the potential impact on safety is an unsafe condition, organisations should initiate reporting of these internal reports according to [IS.I.OR.230](#_DxCrossRefBm1193569432). ##### GM1 IS.I.OR.215(a)&(b) Information security internal reporting scheme *ED Decision 2023/009/R* **RELATIONSHIP BETWEEN INTERNAL AND EXTERNAL REPORTING** Organisations should collect and report internally incidents and vulnerabilities aiming at covering all items within the scope of this Regulation. Both internal and external reporting are necessary for a complete and effective reporting system. Internal reports should be assessed in a timely manner and where the potential impact on safety is an unsafe condition, organisations should initiate reporting of these internal reports according to [IS.I.OR.230](#_DxCrossRefBm1749084163).