+IR-04(06) Insider Threats

IR-04(06) Insider Threats

Control

Implement an incident handling capability for incidents involving insider threats.

Discussion

Explicit focus on handling incidents involving insider threats provides additional emphasis on this type of threat and the need for specific incident handling capabilities to provide appropriate and timely responses.

Assessment Objective

an incident handling capability is implemented for incidents involving insider threats.

Assessment Method

Examine

Incident response policy procedures addressing incident handling mechanisms supporting incident handling system design documentation system configuration settings and associated documentation incident response plan system security plan audit records other relevant documents or records

Interview

Organizational personnel with incident handling responsibilities organizational personnel with information security responsibilities

1. Преглед

1.1 Препратки

1.2 Идентифицирани изисквания

1.3 Свързани регулации

2. Идентифицирани изисквания

Изисквания

3. Свързани регулации

Регулации

Свързани задачи

Връзки
is blocked by IR-04(06) Insider Threats – Assessment Procedure
is blocked by Insider Threat Program