When an information security incident occurs, which information department should take the lead in responding and feed it back to the information system and security management department?

The Measures for Reporting, Investigating and Handling Information Security Incidents in the Securities and Futures Industry issued by the China Securities Regulatory Commission on the 27th stipulates that institutions with information security incidents shall report the incidents in a timely, accurate and complete manner, and shall not report them late, falsely report, conceal or omit them, and clearly put forward the time limit requirements, reporting paths and reporting contents of emergency reports and after-the-fact summary reports of information security incidents of industry institutions. The relevant departments of the CSRC will strictly abide by professional ethics and strictly handle information.