Description

wolkvox manages information security incidents through a structured and documented procedure integrated into its Information Security Management System (ISMS), certified under the ISO/IEC 27001 standard. This procedure defines a clear action framework that covers all critical stages—from prevention and detection to recovery and post-incident analysis.

The goal is to ensure a fast, effective, and coordinated response to any incident, minimizing its impact and restoring service normality as quickly as possible. Additionally, business continuity plan tests are conducted every six months to evaluate response capabilities and the recovery of affected services.

Features

Incident Management Phases

• Prevention: Implementation of proactive controls (e.g., firewalls, continuous monitoring, security training) to reduce the likelihood of incidents.
• Detection: Use of automated tools and manual processes to identify security events in a timely manner.
• Evidence collection and preservation: Documentation and protection of evidence for further analysis and potential legal investigations.
• Containment: Isolation of the incident to prevent its spread and mitigate its impact on systems and data.
• Eradication: Elimination of the root cause of the incident (e.g., security patches, malware removal).
• Recovery: Restoration of affected services to their normal operational state, verifying functionality and security.
• Communication: Internal and external notification (as applicable) about the incident, its impact, and the actions taken.
• Lessons learned: Post-incident analysis to identify process improvements and prevent future events.

Business Continuity Testing

• Semiannual drills: Business continuity plan tests are conducted to assess the effectiveness of incident response and ensure timely service recovery.
• Results evaluation: Drills help identify strengths and areas for improvement, allowing procedures to be adjusted as needed.
• Updated documentation: Test results are recorded and integrated into the ISMS, ensuring that response plans remain current.