Annex A 5.27 - Learning From Information Security Incidents

Knowledge gained from information security incidents shall be used to strengthen and improve the information security controls.