Requirement
"Information security incidents shall be responded to in accordance with the documented procedures."[1]
Explanation
After establishing an incident response plan create your incident response team. The incident response team will respond to system alerts and user reports and determine if they are incidents. If the event is an incident the team will respond in accordance with the plan.
