The company formally defines how security alerts are prioritised, assigned and responded to
Sekit's Alerting and triage policy, one of A.5.1's topic-specific policies, defines how security alerts are prioritised, assigned, and how quickly each priority level must be looked at.
A written policy defining alert priority and assignment supports triage, but deciding whether an event qualifies as an incident is a separate judgment this control requires, not something the policy itself performs.
https://sekit.ai/api/mcp/crosswalk