Assessment Objective
Determine if:
- IR-02(01) simulated events are incorporated into incident response training to facilitate the required response by personnel in crisis situations.
Assessment Methods
Examine
- Incident response policy
- procedures addressing incident response training
- incident response training curriculum
- incident response training materials
- incident response plan
- system security plan
- privacy plan
- other relevant documents or records
Interview
- Organizational personnel with incident response training and operational responsibilities
- organizational personnel with information security and privacy responsibilities
Test
- Mechanisms that support and/or implement simulated events for incident response training
Linked Issues
| Linktype | Issue |
|---|---|
| blocks | IR-02(01) [H] Simulated Events |