Element 7 - Monitoring, Investigation and Reporting
Entity must develop an incident investigation procedure that defines how incident investigations are to be conducted.