Esta página también está disponible en español.
Incidents · Incident management and reporting
A serious incident leaves hours for the first report, not days. Almenara helps you classify it, keeps each regime’s deadline in view and prepares every report from what is already recorded. Your lead reviews it and sends it.
Tell us what you are and what happened. The calculator says which reports you have to prepare, for whom and by when. They all come from the same incident record.
What you are
What happened
5 reports · 2 authorities · next in 4 h
Sample data
By deadline
Sample data A payment institution of 90 people. Ransomware encrypts the payment reconciliation system for 9 hours, with possible access to customer data. Indicative deadlines and thresholds, with their source. Not legal advice.
The calculator’s case, step by step. Every report comes from the record as it fills up; nothing is written twice.
Sample data
T0
The reconciliation system stops responding: the files are encrypted. The incident record is opened.
2 h
Each framework’s criteria are assessed with what is recorded.
AI proposes
Proposes the classification under each regime: critical service affected and data access, major for DORA; personal data breach for the GDPR.
A person decides
The security lead reviews and confirms it. The deadlines start from that moment.
4 h
The affected servers are isolated and compromised access is cut.
6 h
Almenara prepares it from the data in the record; the security lead reviews it and sends it to the Bank of Spain.
9 h
The Continuity playbook is followed: restore from backup and back to service.
78 h
With containment and recovery already recorded. The AEPD received the breach notification before 72 h.
1 month
Root cause, final impact and measures, from the latest intermediate report.
1 month
What worked, what didn’t and what changes. Signed off by management.
1 month
Corrective actions and the evidence for 5.24–5.28 stay in Compliance.
Next review
The scenario goes into the next incident drill.
The same record also produces the reports for your management, your suppliers and your clients.
Sample data
AI proposes the draft from the record; the security lead reviews and approves it.
AI proposes the draft from the record; management reviews and approves it.
The incident is recorded once. The classification under each framework, the deadlines and the fields of each report come from there.
Templates with the fields each authority asks for: Bank of Spain, INCIBE-CERT, CCN-CERT and AEPD.
Almenara prepares the report; sending depends on each authority’s channel, and when and who sent it is recorded.
If the incident stops a critical process, the playbook says who does what and in which order things recover.
The incident arrives linked to its profile in Suppliers, and the supplier answers through its portal.
Timeline, root cause and lessons, with actions followed until they are closed.
Every closed incident leaves evidence for ISO 27001 controls 5.24 to 5.28, ready for the auditor.
Three questions and we tell you under which frameworks you would have to notify.
With your answers
Indicative. For DORA, the other criteria use the sample case values.
Demo
Your cloud provider goes down at 09:12: you see whether it is serious, which deadlines are running and the draft report ready for your lead to review and send.
Walk through the caseWith the module, your team does the work and the platform organises it, reminds you and keeps it with its evidence. If you’d rather delegate part of it, our team does it as a fixed-scope service, contracted separately.
Incident response exerciseEvery year
A full incident response exercise, with the notification to the authority prepared as if it were real.
Incident response playbooksOnce
Five response playbooks for the most likely incidents in your organisation.
Post-incident reviewWhen needed
When a real incident happens, we analyse the causes, the response and what needs to change.
What happens in this module reaches the others without being entered again.
And every report comes from the same record, whatever the regime: NIS2, DORA, Spain’s National Security Framework (ENS) or the General Data Protection Regulation (GDPR).
Ask for information or a meeting: in 60 minutes we load a sample of your data and you see it working.