Standards › Standard 2A › Forms
Form · DIG-FRM-001 · Version 1.1 · Approved by the ASF Expert Committee
Supports: 2A.4
Purpose
To record the yearly test of the breach response plan: a simulated breach, the steps taken and the time to complete each step.
How to complete
- Choose a realistic scenario (for example, a lost laptop or a misdirected email).
- Run the scenario with the breach team. Record the time for each step.
- Record what worked, what did not, and the actions.
- Sign and file the record.
Checks
| Check | Entry |
|---|---|
| Breach team contacted within 1 hour of the scenario start | Yes [EC] |
| Containment steps carried out | Yes [EC] |
| Assessment completed within 24 hours (simulated) | Yes [EC] |
| Notification decision recorded | Yes [EC] |
| Actions from the test set with owners and dates | Yes [EC] |
Evidence
| Reference | Note |
|---|---|
| E-009 | ASF Expert Committee consensus. |
Change history
| Version | Date | What changed | Approval |
|---|---|---|---|
| 1.0 | the date of approval | First version | Approved by the ASF Expert Committee |
| 1.1 | the date of approval | Internal quality review: corrected cross-references, status wording and document control | Approved by the ASF Expert Committee |
E-learning for this document
References
- Accréditation Sans Frontières (2026). ASF Expert Committee consensus on Standard 1. (E-009)