Incident Handling
Incident classification, mitigation and evidence-reconciled recovery.
Document status and scope
Reference draft for agreeing service conditions. No confirmed approver or effective date is available. The procedure below requires project review and approval before application.
| Property | Value |
|---|---|
| Document ID | LTANS-INCIDENT-HANDLING |
| Content revision | 0.2 · DRAFT |
| Topic | Containment, recovery and reconciliation |
| Editorial date | 15/10/2026 |
| Effect | Not confirmed |
Responsibilities and decisions
Operations coordinate security and record owners; reopening has an accountable approver.
Application procedure
Detect → preserve logs → contain → fix cause → restore → check data/evidence → reopen.
Exceptions and controls
Database restore alone is insufficient if bytes, keys, evidence or outbox disagree.
Records and release conditions
Timeline, impact, cause, recovery checks and preventive actions.
Formal release must record owner, approver, scope and effective date; preserve revisions and approval evidence. Confirm contacts through info@mobile-id.vn. Do not include secrets or sensitive records in discovery email.