Common use of Information Security Incident Response Plan Clause in Contracts

Information Security Incident Response Plan. Cengage has developed a documented methodology for responding to security incidents quickly, consistently, and effectively. Should an incident occur, a predefined team of Cengage employees will activate a formal incident response plan that addresses such areas as: • Escalations based on the classification or incident severity • Contact list for incident reporting/escalation • Guidelines for initial responses and follow up with involved clients • Compliance with applicable security breach notification laws • Investigation log • System recovery • Issue resolution, reporting, and review Cengage’s policies define a security incident, incident management and all employees’ responsibilities regarding the reporting of security incidents.