Incident admissible chain-of-custody management Response Legal processes & controls? Preparation Information Does your incident response capability Security include the use of legally admissible forensic data collection and analysis techniques? Information Are you capable of supporting litigation Security holds (freeze of data from a specific point in time) for a specific tenant without freezing other tenant data? Information Do you enforce and attest to tenant data Security separation when producing data in response to legal subpoenas? Information Incident Do you monitor and quantify the types, Security Response 25.1 volumes, and impacts on all information Metrics security incidents? Information Will you share statistical information Security 25.2 security incident data with your tenants upon request? Information Acceptable Use Do you provide Security 26.1 (describe/explain/attach/embed associated documents) documentation regarding how you may utilize or access tenant data and/or metadata? Information Do you collect or create metadata about Security 26.2 tenant data usage through the use of
Incident Response Legal Preparation admissible chain-of-custody management processes & controls? Information Security Does your incident response capability include the use of legally admissible forensic data collection and analysis techniques? Information Security Are you capable of supporting litigation holds (freeze of data from a specific point in time) for a specific tenant without freezing other tenant data? Information Security Do you enforce and attest to tenant data separation when producing data in response to legal subpoenas? Information Security Incident Response Metrics Do you monitor and quantify the types, volumes, and impacts on all information security incidents? Information Security Will you share statistical information security incident data with your tenants upon request? Information Security Acceptable Use Do you provide (describe/explain/attach/embed associated documents) documentation regarding how you may utilize or access tenant data and/or metadata? Information Security Do you collect or create metadata about tenant data usage through the use of 25.1 25.2 26.1 26.2
427069043.docx