RS.CO-3

Information is shared consistent with response plans

Respond · Communications

Manual Attestation

Compliance Score

Not Assessed

Documentation Maturity

1/ 5

Target: 2.5

Implementation Maturity

1/ 5

Target: 2.5

Control Description

During incidents, relevant information is shared with employees, stakeholders, and external parties (CERT.be, authorities) as defined in the response plan.

Remediation Guidance

Define communication templates for different incident types. Establish notification timelines (NIS2 requires 24h early warning, 72h detailed notification). Train designated communicators. Maintain up-to-date contact lists.