+CP-03(01) Simulated Events
|
CP-03(01) Simulated Events
Control
Incorporate simulated events into contingency training to facilitate effective response by personnel in crisis situations.
Discussion
The use of simulated events creates an environment for personnel to experience actual threat events, including cyber-attacks that disable websites, ransomware attacks that encrypt organizational data on servers, hurricanes that damage or destroy organizational facilities, or hardware or software failures.
Assessment Objective
simulated events are incorporated into contingency training to facilitate effective response by personnel in crisis situations.
Assessment Method
Examine
Contingency planning policy
procedures addressing contingency training
contingency plan
contingency training curriculum
contingency training material
system security plan
other relevant documents or records
Interview
Organizational personnel with contingency planning, plan implementation, and training responsibilities
organizational personnel with information security responsibilities
1. Übersicht
1.1 Referenzen
1.2 Identifizierte Anforderungen
1.3 Zugehörige Regulierungen
2. Identifizierte Anforderungen
Anforderungen
| Quelle |
Anforderung |
3. Zugehörige Regulierungen
Regulierungen
| Quelle |
Regulierung |
Verknüpfte Vorgänge
|