Assessment Objective
Determine if:
- the effectiveness of the incident response capability is tested [Assignment: frequency].
Assessment Methods
Examine
- incident response policy and procedures
- contingency planning policy and procedures
- procedures for incident response testing
- procedures for contingency plan testing
- incident response testing material
- incident response test results
- incident response test plan
- incident response plan
- contingency plan
- system security plan
- other relevant documents or records
Interview
- personnel with incident response testing responsibilities
- personnel with information security responsibilities
Linked Issues
| Linktype | Issue |
|---|---|
| blocks | 03.06.03 Incident Response Testing |