8. Incident Management and NIS2 Compliance
8.1 Incident Response Plan
This is work in progress and not fully implemented yet, as OpenRemote, we are working on this subject and will publish an update soon.
OpenRemote maintains procedures for responding to operational or security incidents affecting its systems or services. The incident response process includes identification, containment, resolution, and documentation of incidents.
Roles and communication channels are defined to ensure that incidents are handled efficiently.
8.2 NIS2 Reporting Obligations
This is work in progress and not fully implemented yet, as OpenRemote, we are working on this subject and will publish an update soon.
When incidents affecting essential services occur, OpenRemote follows applicable reporting obligations under the NIS2 Directive. Relevant authorities may be informed according to the required timelines.
Incident documentation supports regulatory reporting and internal review.
8.3 Post-Incident Review
This is work in progress and not fully implemented yet, as OpenRemote, we are working on this subject and will publish an update soon.
After resolving an incident, OpenRemote conducts a review to identify the root cause and determine whether improvements are required in processes or controls.
Lessons learned are documented and integrated into improvement activities.