Nasdaq’s Incident Management Policy governs security incidents that arise in Nasdaq-controlled production environments (e.g. third-party modules may not be in scope), with the primary goals of the policy being to restore normal service operation as quickly as possible following a security incident, provide timely and accurate communication to all stakeholders regarding each event, and minimize the adverse impact of an event on business operations and/or the quality of provided services.