GRCLibrary.ai

SOP

Security Ticket Reporting Scheme

This SOP defines the standard naming and reporting scheme for security incident tickets. A consistent naming convention allows the SOC and management to rapidly identify the vendor, ITSM ticket, and incident type without opening the full ticket record, improving communication speed during incident response.

Type
SOP
Version
1.1.5
Date
2026-10-12
Owner
Chief Information Security Officer
Approving authority
Chief Information Security Officer
Classification
Public
Confidentiality
Public
Category
Information Security
Review frequency
Annual or upon significant change to vendor or tooling landscape
Licence
CC BY-SA 4.0

Read the full text on GitHub (opens in a new tab)

Outline

  • Purpose
  • Ticket naming convention
  • Vendor tag assignment
  • Naming format components
  • Usage rules
  • Ticket creation requirements
  • Framework alignment

Frameworks it maps to

Related documents