Venvera incident management with DORA ITS reporting timelines
Incident management with regulatory reporting clocks - shown with sample data.

The Incident Register tracks information security incidents and manages the mandatory reporting workflow to aeCERT (UAE Computer Emergency Response Team).

aeCERT Reporting

Critical and high-severity incidents must be reported to aeCERT within the timeframes specified by TDRA and the UAE Cyber Security Council. The system tracks:

  • Whether the incident has been reported to aeCERT
  • The date of reporting
  • aeCERT reference number

Incident Lifecycle

  1. Detected - Incident identified
  2. Investigating - Root cause analysis underway
  3. Contained - Immediate threat mitigated
  4. Resolved - Full remediation complete
  5. Closed - Post-incident review complete, lessons learned documented