Page Comparison

The goal of the incident management process is to handle and solve different levels of incidents in a structured way and with minimal disruption to the functioning of the iSHARE network.

Responsibilities

Several parties have responsibilities and tasks in the incident management process:

• The 

• Steering party proactively coordinates the handling and solving of incidents, and assists if necessary;

• All parties are responsible for reporting all incidents in the data space/iSHARE

• Network, and taking the steps necessary to handle and solve incidents.

Sequence

          Before initiating the process as below, the reporting party, in conjunction with the causing party (if not the same) MUST assess together whether the event deemed an incident is indeed an incident.

  At any point the reporting party

can approach a legal entity (local or international) for the resolution of the incident. This needs to be informed to the concerned Satellite/ Scheme owner as well. 

1. The reporting party reports an incident to the

1. Steering party, including an estimation of the incident classification;

1. The Steering party assesses the incident and the estimated incident classification by the reporting party, and:
   1. Accepts the incident classification and moves to step 3; 
      or
   2. Changes the incident classification and moves to step 3;
      or
   3. Rejects the reported event as an incident, and communicates why to the reporting party.

1. The Steering party registers the incident and initiates incident handling, as follows:
   1. If classified as

1. 1. a minor incident:
      1. If the minor incident is assessed as the result

1. 1. 1. of non-compliance with

1. 1. 1. rules and guidelines, and/or if it has had significant negative impact on the normal operation of the data space/iSHARE network, the warnings, suspension and exclusion process

1. 1. 1.  will also be initiated;

1. 1. 1. The Steering party gives the reporting party, the causing party and/or (an)other party(

1. 1. 1. ies) - whichever it deems most capable/suitable - the responsibility of handling the minor incident, under supervision of

1. 1. 1. the Steering party (see step 4); 
      2. The party(s) responsible for handling the minor incident communicates the minor incident, the incident manager, and that the minor incident is being solved, to the parties impacted by it.
   2. If classified as

1. 1. a calamity:
      1. If the calamity is assessed as the result

1. 1. 1. of non-compliance with

1. 1. 1. rules and guidelines, and/or if it has had significant negative impact on the normal operation of the

1. 1. 1. data space, the warnings, suspension and exclusion process

1. 1. 1.  will also be initiated;

1. 1. 1. The Steering party gives the reporting party, the causing party and/or (an)other party(

1. 1. 1. ies) - whichever it deems most capable/suitable -

1. 1. 1.  the responsibility of handling the calamity, under supervision of

1. 1. 1. the Steering party (see step 4); 
         • IF

1. 1. 1. • there is a data security breach that needs to be reported in line

1. 1. 1. • with Data leaks reporting (meldplicht datalekken), the party(

1. 1. 1. • ies) responsible for handling the calamity report the data security breach to the Autoriteit Persoonsgegevens (personal data authority) and follow the authority's guidelines on the rest of the incident management process;

1. 1. 1. The Steering party informs the data space/iSHARE network of the calamity (and that it is being solved) and who the incident manager is, as well as any parties outside the network that it deems necessary to inform (e.g. branch organisations, the NCSC or even law enforcement);

1. 1. 1. The Steering party sets up an action plan to minimise risks and damage.
   2. If classified as

1. 1. a crisis:
      1. If the crisis is assessed as the result

1. 1. 1. of non-compliance with

1. 1. 1. rules and guidelines, and/or if it has had significant negative impact on the normal operation of the

1. 1. 1. data space, the warnings, suspension and exclusion process

1. 1. 1.  will also be initiated;
      2. The

1. 1. 1. Satellite gives the reporting party, the causing party and/or (an)other party(

1. 1. 1. ies) - whichever it deems most capable/suitable -

1. 1. 1.  the responsibility of handling the crisis, under supervision of and assisted by

1. 1. 1. the Steering party (see step 4). Different to the process for minor incidents and calamities,

1. 1. 1. the Steering party can also choose to take the responsibility of handling the crisis itself even if it is not the causing party; 
         • IF

1. 1. 1. • there is a data security breach that needs to be reported in line

1. 1. 1. • with Data leaks reporting (meldplicht datalekken), the party(

1. 1. 1. • ies) responsible for handling the calamity report the data security breach to the Autoriteit Persoonsgegevens (personal data authority) and follow the authority's guidelines on the rest of the incident management process;

1. 1. 1. The Steering party informs the data space of the crisis (and that it is being solved) and who the incident manager is, as well as any parties outside the network that it deems necessary to inform (e.g. branch organisations, the NCSC or even law enforcement);
      2. The

1. 1. 1. Satellite sets up an action plan to minimise risks and damage.

1. The Steering party coordinates the contact with the involved parties, monitors progress and assists in handling the incident if necessary.

1. The Steering party also communicates progress to the

1. data space in case of a calamity or crisis. If progress is non-compliant to the incident service level,

1. the Steering party MAY choose to upscale (from incident to calamity or from calamity to crisis);
2. When the incident is handled and therefore solved, the Steering party closes the

1. incident;
   1. In case of a minor incident, the responsible party communicates the incident closure to the parties impacted by it;
   2. In case of a calamity or crisis, the Steering party communicates the

1. 1. incident closure to the

1. 1. data space.The Steering party evaluates the incident with the reporting and/or (an)other party(

1. 1. ies), and registers the evaluation for future learning. It can choose to share the gained insights with (selected) parties in the data space/iSHARE network.