Quilzomanual

Cases, incidents and regulatory clocks

Incidents with the clocks each law starts, and actions a second person approves.

In the adminCases

The Cases screen
Cases, here four the shield opened by itself.

  1. Declare an incident

    quilzo incident regimes eu nis2
quilzo incident declare --title "Token used from an unknown country" --grade sev2 --finding ID

  2. Start the clocks

    A clock starts when somebody decides the organisation is aware, and that decision is recorded with its reason.

    quilzo incident decide ID aware --because "..."
quilzo incident duties

  3. Discharge or waive each duty

    quilzo incident discharge ID "NIS2 early warning" --because "sent to the CSIRT"
quilzo incident waive ID "GDPR Article 34" --because "no personal data involved"

  4. Act on another tool, with a second person

    quilzo action add okta-suspend-user --org example
quilzo incident act ID okta-suspend-user okta:USER --because "..."
quilzo incident act-approve ID 1

    The exact request is shown before anybody approves it, and it is sent only when a second person does.