Article 91

Handling of incidents

1. Union space operators shall establish and implement an incident management process that allows them to promptly detect, identify, handle and respond to incidents and to report significant incidents in accordance with Article 93. Union space operators shall set up roles and responsibilities in relation to the different types of incidents which shall be adapted to the different risk scenarios.

2. Union space operators shall ensure that at least the significant incidents are reported to the senior risk management staff immediately. The management body shall receive, on a regular basis, to be determined by the chief information security officer, the security manager or the senior risk management officer, sufficient information about the significant incident, an assessment of their impact, information about the response and recovery measures which have been taken and any additional controls and procedures to be established in the follow-up of that significant incident.

3. When a satellite hosts third-party payloads, and an incident has adverse impact on the satellite platform operations, Union space operators shall inform the concerned third-party entity and shall follow the instructions set out in the pre-defined agreements referred to in the second subparagraph and those set out in the response and disaster recovery plans. For those purposes of ensuring speed and effective handling of incidents, Union space operators shall conclude agreements with third-party entities for which a satellite host a payload.

4. Union space operators shall address the root causes of incidents to prevent the occurrence of future incidents.

Warning: Cannot modify header information - headers already sent by (output started at /var/www/html/article.php:8) in /var/www/html/script/loginauth.php on line 163