Incident Response Process
MyDesk has a documented incident response procedure that defines roles, responsibilities and communication obligations in the event of security incidents. The procedure is based on the NIST Cybersecurity Framework and is approved by management.
Communication obligations
In the event of security incidents affecting customers, MyDesk commits to the following communication:
- Early warning: No later than 24 hours after becoming aware of the incident
- Status update: No later than 48 hours after initial notification
- Final report: Typically within one month of the incident ending
- Continuous updates for long-running events
- GDPR notification to the supervisory authority within 72 hours in the event of a data breach
Incident classification
Incidents are classified by severity (P1-P4), which determines the response time and escalation process. P1 incidents (critical) are handled with immediate response and direct management involvement.
Post-incident analysis
After the end of an incident, a post-incident analysis (PIR/post-mortem) is carried out to identify root causes and prevent recurrence. Results are documented and shared with relevant stakeholders.
Exercises and tests
MyDesk conducts regular tabletop exercises and simulated incident scenarios to test and improve incident response capabilities.
Incident Response
- Early warning – Within 24 hours
- Status Update – Within 48 hours
- Final report – Within 1 month
- GDPR notification – Within 72 hours
- P1-P4 classification
- Post-incident analysis
- Regular exercises