The Incident Register tracks information security incidents and manages the mandatory reporting workflow to aeCERT (UAE Computer Emergency Response Team).

aeCERT Reporting

Critical and high-severity incidents must be reported to aeCERT within the timeframes specified by TDRA and the UAE Cyber Security Council. The system tracks:

  • Whether the incident has been reported to aeCERT
  • The date of reporting
  • aeCERT reference number

Incident Lifecycle

  1. Detected — Incident identified
  2. Investigating — Root cause analysis underway
  3. Contained — Immediate threat mitigated
  4. Resolved — Full remediation complete
  5. Closed — Post-incident review complete, lessons learned documented