Information security incident management procedure is in place, which make all employees aware of their responsibilities to report any information security events.
"*If the result is ""No"", fill out the reasons.
*If the result in the last year was ""No"",
fill out the explanations with the improvement status."