The activities of an organization to identify, analyze, and correct issues and to prevent a future re-occurrence. Within structured organizations, these issues are normally dealt with, communicated, and corrective action is taken by either an Incident Response Team (IRT) or an Incident Management Team (IMT). A formal Incident Management Program should include: notification to all affected customers of the third party; provide customers with appropriate data to respond to the issue; consider the timing needed for customers to respond to the issue; allow customer to activate its own Incident Management Program; and coordinate with law enforcement and appropriate regulatory agencies as required
