Orange County NC Website
Browse       Search
DocuSign Envelope ID:24BBAFA9-CD81-4144-ACEF-E9036E703739 <br /> • 24/7 incident response and monitoring coverage for any evidence of unauthorized activity, critical <br /> IDS alerts, and/or reports of unauthorized critical system or content file changes. <br /> • Specific personnel are designated to be available on a 24/7 basis to respond to compromise <br /> alerts. <br /> • Provide appropriate training to staff with security breach response responsibilities as is industry <br /> standard best practices. <br /> • Establish a process to modify and evolve the incident response plan according to lessons learned <br /> and to incorporate industry developments. <br /> At a minimum, Jende Solutions will conduct a test of the Incident Response plan and the ability of the <br /> incident response team to execute the plan on an annual basis. A copy of the test plan and test results <br /> will be maintained for a period of at least one year. Any gaps in the security plan or staff training will be <br /> identified in the plan testing and reported to the Security/IT Steering Committee for plan modification and <br /> incorporation of lessons learned. <br /> 24. What is the process by which the cloud provider updates policies and informs customers? <br /> N/A <br />