scope:

This document provides the guidelines for coordination among multiple organizations to work together to handle information security incidents. It also addresses the impacts of external cooperation to the internal incident management of an individual organization, and provides guidelines for an individual organization to adapt to the coordination. Furthermore, it provides guidelines for the coordination team, if it exists, to perform coordination activities supporting the cross-organization incident response.

The principles given in this document are generic and intended to be applicable to multiple organizations to work together to handle information security incidents, regardless of their types, sizes or nature. Organizations can adjust the guidance given in this document according to their type, sizes and nature of business in relation to the information security risk situation. This document is also applicable to an individual organization that participate in partner relationships.