As per NSE circular (26th July) we need to intimate cyber attack in 24 hours.
Do they want to consider spam / phishing email also as attack and report it ? (question posted on behalf of a CISO member)
You need to be a member of CISO Platform to add comments!
Replies
The below question is based on CISO Platform closed group discussion:
(private CISO member):
Email cannot be an attack
The below question is based on CISO Platform closed group discussion:
(private CISO member):
Just receiving malcious email or disclosure of vulnerability or discovery of know virus cannot be consider as attack. It need to be further investigated to understand the impact. If there is bussiness impact or organization/customer data loss etc then you need to report.