Infrastructure Policy: Incident Response

This policy establishes the guidelines for preventing, detecting and responding to intrusions and unauthorized access to non-public customer information.

The scope of this policy includes incident identification, incident response, restoration and notification procedures. In this sample, the incident response program ensures the safeguarding of sensitive customer information. Sensitive customer information includes a customer’s name, address or telephone number in conjunction with the customer’s social security number, driver’s license number, account number, credit or debit card number, or a personal identification number or password that would permit access to the customer’s account.