Assessment Objective

Determine if:

• IR-02(02) an incident response training environment is provided using [Assignment: automated mechanisms].

Assessment Methods

Examine

• Incident response policy
• procedures addressing incident response training
• incident response training curriculum
• incident response training materials
• automated mechanisms supporting incident response training
• incident response plan
• system security plan
• privacy plan
• other relevant documents or records

Interview

• Organizational personnel with incident response training and operational responsibilities
• organizational personnel with information security and privacy responsibilities

Test

• Automated mechanisms that provide a thorough and realistic incident response training environment

Propojené úkoly

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final