While implementing ISMS information security incident reporting and management processes, we have clearly set out the incident reporting process and relevant rights and responsibilities, classifying related information security incidents in a graded manner and formulate corresponding principles for handling.