From d9074d63b860a272acc209866c3a894ed5ce68af Mon Sep 17 00:00:00 2001 From: David Elliott Date: Tue, 28 Jan 2025 13:14:19 +0000 Subject: [PATCH 1/2] Update incident-process.html.md.erb The previous form linked to is no longer monitored, the correct process is to log a call with service desk. --- runbooks/source/incident-process.html.md.erb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/runbooks/source/incident-process.html.md.erb b/runbooks/source/incident-process.html.md.erb index 26c04c16..1be03fad 100644 --- a/runbooks/source/incident-process.html.md.erb +++ b/runbooks/source/incident-process.html.md.erb @@ -11,7 +11,7 @@ This document describes our incident handling process. ## 1. Confirm that the event constitutes an incident -> If this is a security breach, also report it [here](https://docs.google.com/forms/d/e/1FAIpQLScjD5d4wkX1SUgxzYfh5eCfCmKfMbR1klzoyEo9gUFZdRuXxg/viewform) +> If this is a security breach, also raise a ticket on the [Technology Portal](https://mojprod.service-now.com/moj_sp). This can be done by telephone or online chat. We define an incident as an event which: From 1332db572f702b9988f6d145725c8affe4bfcce4 Mon Sep 17 00:00:00 2001 From: David Elliott Date: Tue, 28 Jan 2025 13:17:42 +0000 Subject: [PATCH 2/2] Update review date and add final step --- runbooks/source/incident-process.html.md.erb | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/runbooks/source/incident-process.html.md.erb b/runbooks/source/incident-process.html.md.erb index 1be03fad..d3a29f8c 100644 --- a/runbooks/source/incident-process.html.md.erb +++ b/runbooks/source/incident-process.html.md.erb @@ -1,7 +1,7 @@ --- title: Incident Process weight: 40 -last_reviewed_on: 2024-09-03 +last_reviewed_on: 2025-01-28 review_in: 6 months --- @@ -158,6 +158,7 @@ After the incident is resolved: * An incident report **must** be published in the [Incident Log](https://runbooks.cloud-platform.service.justice.gov.uk/incident-log.html#incident-log) section of the Runbook site. * A blameless post mortem meeting **may** be scheduled * A [runbook] for how to fix this issue **should** be published +* If a security incident was raised on the Technology Portal, ensure the incident is updated there and resolved [runbook]: https://runbooks.cloud-platform.service.justice.gov.uk [raise a ticket]: https://github.com/ministryofjustice/cloud-platform/issues/new?template=cloud-platform-support-request.md&labels=support+team