+IR-04(05) Automatic Disabling of System

IR-04(05) Automatic Disabling of System

Control

Implement a configurable capability to automatically disable the system if [Assignement: security violations] are detected.

Discussion

Organizations consider whether the capability to automatically disable the system conflicts with continuity of operations requirements specified as part of [CP-2](#cp-2) or [IR-4(3)](#ir-4.3) . Security violations include cyber-attacks that have compromised the integrity of the system or exfiltrated organizational information and serious errors in software programs that could adversely impact organizational missions or functions or jeopardize the safety of individuals.

Assessment Objective

a configurable capability is implemented to automatically disable the system if [Assignement: security violations] are detected.

Assessment Method

Examine

Incident response policy procedures addressing incident handling automated mechanisms supporting incident handling system design documentation system configuration settings and associated documentation system security plan incident response plan privacy plan other relevant documents or records

Interview

Organizational personnel with incident handling responsibilities organizational personnel with information security responsibilities system developers

1. Přehled

1.1 Odkazy

1.2 Identifikované požadavky

1.3 Související regulace

2. Identifikované požadavky

Požadavky

3. Související regulace

Regulace

Propojené úkoly

Vazby
is blocked by IR-04(05) Automatic Disabling of System – Assessment Procedure
is blocked by Automated Response to Suspicious Events
is blocked by Automatic Disabling of Technology Assets, Applications and/or Services (TAAS)