diff --git a/SecurityPolicy.html b/SecurityPolicy.html index 2ef4e87..9b69ed1 100644 --- a/SecurityPolicy.html +++ b/SecurityPolicy.html @@ -721,13 +721,13 @@ The standard of monitoring, alerting and reporting must be documented.

5.3. Immediate Action

-

5.2.1. Severity and Priority

+

5.3.1. Severity and Priority

On discovery of an incident, an initial assessment of severity and priority must be made.

-

5.2.2. Communications

+

5.3.2. Communications

An initial report should be circulated.

@@ -737,7 +737,7 @@ A communications forum should be established for direct support of high priority or high severity incidents.

-

5.2.3. Escalation

+

5.3.3. Escalation

A process of escalation should be established for oversight and management purposes,