Put in place early warning indicators

Define, establish and implement ICT-related incident management process

Record all ICT-related incidents and significant cyber threats

Establish procedures for consistent monitoring, handling and follow-up

Establish incident identification and classification procedures

Assign roles and responsibilities for different incident types

Set out communication plans for incidents

Report major incidents to senior management

Establish incident response procedures