Assessment Objective
Determine if:
- IR-02(03)[01] incident response training on how to identify and respond to a breach is provided;
- IR-02(03)[02] incident response training on the organization’s process for reporting a breach is provided.
Assessment Methods
Examine
- Incident response policy
- contingency planning policy
- procedures addressing incident response testing
- procedures addressing contingency plan testing
- incident response testing material
- incident response test results
- incident response test plan
- incident response plan
- contingency plan
- system security plan
- privacy plan
- other relevant documents or records
Interview
- Organizational personnel with incident response training responsibilities
- organizational personnel with information security and privacy responsibilities
Linked Issues
| Linktype | Issue |
|---|---|
| blocks | IR-02(03) [P] Breach |