Frameworx Process: Define Security Management policies & procedures to facilitate detection incidents

Category: (3) eTOM Process Type

Process Identifier: 1.7.2.2.11

Original Process Identifier: 1.3.2.2.11

Maturity Level: 4

Description

Policy-based recognition of a possible incident. Within the Detection process the organization gains an awareness that Analysis has detected an anomaly – relative to expected results -- and that a possible incident may be occurring or may have occurred.  At this stage, automated policy-based remediation may still be possible – i.e., without invoking Incident Management.

Extended Description

Not used for this process element.

Explanatory

Reserved for future use.

Mandatory

Reserved for future use.

Optional

Reserved for future use.

Interactions

Candidate Explanatory

Reserved for future use.

Candidate Mandatory

Reserved for future use.

Candidate Optional

Reserved for future use.

Candidate Interactions

Reserved for future use.

(3) eTOM Process Type Define Security Management policies & procedures to facilitate detection incidents

Appears on these diagrams:

• 1.7.2.2 Security Management

Issues

• Business Process Framework 12.0 Addition
• Business Process Framework 15.0 Modification
• Business Process Framework 15.5 Modification

---