Untriaged Notable Events
Alerts when notable events have not been triaged
Detecting and proving that priority alerts indicating potential risk to security posture are not being processed in a timely manner is an industry best practice.
Specific to GDPR, this method is considered an effective security control, as required by Article 32. Demonstrating that noteworthy activity is being triaged and appropriately escalated will help to prove compliance for data privacy audits from authorities (Article 58) or counteract any compensation claims (Article 82).