Incident Response Summary

Detection

Incidents may be identified through monitoring and logging, automated alerts, internal review, customer reports or external disclosure to security@coopsphere.org.

Response stages

• Triage — assess scope, severity and whether personal information or customer data is affected.
• Containment — limit further impact, for example by revoking access, disabling a component or rotating credentials.
• Eradication and recovery — remove the cause and restore normal service, using backups where required.
• Communication — notify affected customers without undue delay with the information available.
• Review — conduct a post-incident review and implement corrective actions.

Customer notification

Where an incident affects a customer's data, we will contact the organization's administrators with a description of what happened, the data involved as far as known, the steps taken, and any recommended action. Regulatory notification obligations remain with the party that holds them under applicable law.