03.06.03 Incident Response Testing

Statement

Test the effectiveness of the incident response capability {{ insert: param, A.03.06.03.ODP.01 }}.

Guidance

Organizations test incident response capabilities to determine their effectiveness and identify potential weaknesses or deficiencies. Incident response testing includes the use of checklists, walk-through or tabletop exercises, and simulations. Incident response testing can include a determination of the effects of incident response on organizational operations, organizational assets, and individuals. Qualitative and quantitative data can help determine the effectiveness of incident response processes.

Assessment objective

the effectiveness of the incident response capability is tested {{ insert: param, A.03.06.03.ODP.01 }}.

Assessment method

• incident response policy and procedures contingency planning policy and procedures procedures for incident response testing procedures for contingency plan testing incident response testing material incident response test results incident response test plan incident response plan contingency plan system security plan other relevant documents or records

Assessment method

• personnel with incident response testing responsibilities personnel with information security responsibilities

1. Přehled

1.1 Odkazy

1.2 Identifikované požadavky

1.3 Související regulace

2. Identifikované požadavky

3. Související regulace

Propojené úkoly

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final