8.2 Incident Management
8.2.1 A Global Security Incident Response Plan is implemented and reviewed at least
annually, to consistently report, escalate, and investigate unauthorized or
suspicious system activities or information related incidents.
8.3 Physical Security
8.3.1 Controls exist to prevent inappropriate and/or unauthorized access to critical
data processing facilities
8.3.2 Appropriate environmental protection measures are implemented at facilities
hosting Information Assets