Incident Response Plan

This document describes how Marta identifies, assesses, contains, communicates, recovers from, and learns from security and privacy incidents affecting Marta systems, customer data, Trust Center content, and related subprocessors. It outlines Marta’s public incident response governance, severity classification, response lifecycle, evidence handling, customer communication approach, GDPR-oriented breach escalation, and post-incident improvement process. This is a public version intended for customers, prospects, auditors, and partners. Detailed internal playbooks, system diagrams, detection logic, credentials, and sensitive escalation paths are intentionally omitted.