+IR-06 [P] Incident Reporting
|
IR-06 [P] Incident Reporting
Control
- Require personnel to report suspected incidents to the organizational incident response capability within [Assignement: time period] ; and
- Report incident information to [Assignement: authorities].
Discussion
The types of incidents reported, the content and timeliness of the reports, and the designated reporting authorities reflect applicable laws, executive orders, directives, regulations, policies, standards, and guidelines. Incident information can inform risk assessments, control effectiveness assessments, security requirements for acquisitions, and selection criteria for technology products.
Assessment Objective
- personnel is/are required to report suspected incidents to the organizational incident response capability within [Assignement: time period];
- incident information is reported to [Assignement: authorities].
Assessment Method
Examine
Incident response policy
procedures addressing incident reporting
incident reporting records and documentation
incident response plan
system security plan
privacy plan
other relevant documents or records
Interview
Organizational personnel with incident reporting responsibilities
organizational personnel with information security and privacy responsibilities
personnel who have/should have reported incidents
personnel (authorities) to whom incident information is to be reported
system users
1. Преглед
1.1 Препратки
1.2 Идентифицирани изисквания
1.3 Свързани регулации
2. Идентифицирани изисквания
Изисквания
| Източник |
Изискване |
3. Свързани регулации
Регулации
| Източник |
Регулация |
Свързани задачи
|