Incident Response and Monitoring

Risk: Unmonitored systems and lack of incident response plans may result in delayed or ineffective responses to breaches or failures.

Control:

• Develop and maintain an Incident Response Plan covering detection, containment, eradication, recovery, and lessons learned.

• Implement monitoring dashboards and alerts for suspicious activities (e.g., unauthorised access, transaction failures).

• Conduct regular incident response drills.

NIST CSF Alignment:

• RS.RP-1: Response planning

• RS.CO-1: Response coordination with stakeholders

• RC.IM-1: Recovery and improvement after incidents

FCA Compliance:

• SYSC 3 & 13: Effective incident management and reporting

• FG 16/5: Proactive monitoring and breach notification processes