+IR-04(08) Correlation with External Organizations
|
IR-04(08) Correlation with External Organizations
Control
Coordinate with [Assignement: external organizations] to correlate and share [Assignement: incident information] to achieve a cross-organization perspective on incident awareness and more effective incident responses.
Discussion
The coordination of incident information with external organizations—including mission or business partners, military or coalition partners, customers, and developers—can provide significant benefits. Cross-organizational coordination can serve as an important risk management capability. This capability allows organizations to leverage information from a variety of sources to effectively respond to incidents and breaches that could potentially affect the organization’s operations, assets, and individuals.
Assessment Objective
there is coordination with [Assignement: external organizations] to correlate and share [Assignement: incident information] to achieve a cross-organization perspective on incident awareness and more effective incident responses.
Assessment Method
Examine
Incident response policy
procedures addressing incident handling
list of external organizations
records of incident handling coordination with external organizations
incident response plan
system security plan
privacy plan
other relevant documents or records
Interview
Organizational personnel with incident handling responsibilities
organizational personnel with information security and privacy responsibilities
personnel from external organizations with whom incident response information is to be coordinated, shared, and correlated
1. Přehled
1.1 Odkazy
1.2 Identifikované požadavky
1.3 Související regulace
2. Identifikované požadavky
Požadavky
| Zdroj |
Požadavek |
3. Související regulace
Propojené úkoly
|