Incident Management Have a clearly defined incident management procedure (refer to the Incident management procedure circulated). Every Institution should establish an Incident management team and clear communication channel internal or external for communicating the incidents Every institution must Classify incidents level of severity: Major, Medium and Minor Establish procedures for handling the incident according to the classification and follow it strictly For any Cyber security related incident all institution MUST contact National CSIRT