Actions

Users

IT security monitoring

IT help desk

Security awareness

Security state analysis

IT security incident response 

Provide customized threat intelligence reports

I

I

I

R/A

S/C

Inform on potential IT Security events/incidents to IT help desk

R

C

A

Review initial reports of potential IT security incidents

R/A

C

I

Inform IT security—incident response

I

R/A

S

S

I

Inform PIR stakeholders

R/A

S

S

I

I

Inform users of major incidents

S

S

R/A

Perform incident response process

C

C

C

S

I

R/A