
188 ◾ Information Security Fundamentals
Event Category and Response Matrix
Impact
Level Description Example Events Action
Business
driven
(medium
to high)
Events could
cause
financial or
reputational
damage
1. Unusual or transaction that
exceed predefined limits
2. Excessive disruption of
normal financial services
(e.g., high number of credit
card declines)
3. Fraudulent activities
detected by the business
unit
4. Unusual system or customer
activity reported by non-IT
staff (e.g., customer service
indicates a phishing scam
e-mail has been sent to
more than 25 customers)
1. Take defensive action as
appropriate
2. Record critical incident ...