Describe how you track/handle incidents. Are incidents centrally managed

Incidents are tracked and managed in Ostendio platform, there is a ticket-type incident that employees are instructed to use when they want to report an incident, employees may also report a potential incident in the security slack channel, the ISO manages this channel and uplifts the report to the Ostendio platform ticket if warranted. If an incident is reported, the CIRT team is notified, the ISO and CTO work together to investigate the “potential” incident, communication is flowing through Slack and a conference bridge is open in the event the CIRT need to discuss the events occuring. Communication internally is also occurring via Slack until resolved. CTO documents RCA in Ostendio platform incident ticket.