Have an up-to-date incident register
Log All Incidents
When doing incident management it is important to keep track of all cyber security incidents in the past. This allows you to better determine the risks of a cyber security incident and adjust policies if needed. The log book of all previous incidents should at least contain all ICT events that had or could have had an impact on the ICT services.