Notifications to regulators, clients and leadership are sent consistently within required timeframes
Sending incident notifications to regulators, clients and leadership within required timeframes and logging each one supports the response this control requires, though notification alone does not contain damage or restore operations.
This process control sends notifications to regulators and leadership consistently within deadline and keeps a record, the operational proof that A.5.5's authority contacts get used.