Assessment Objective
Determine if:
- IR-03(03)(a)
- IR-03(03)(a)[01] qualitative data from testing are used to determine the effectiveness of incident response processes;
- IR-03(03)(a)[02] quantitative data from testing are used to determine the effectiveness of incident response processes;
- IR-03(03)(b)
- IR-03(03)(b)[01] qualitative data from testing are used to continuously improve incident response processes;
- IR-03(03)(b)[02] quantitative data from testing are used to continuously improve incident response processes;
- IR-03(03)(c)
- IR-03(03)(c)[01] qualitative data from testing are used to provide incident response measures and metrics that are accurate;
- IR-03(03)(c)[02] quantitative data from testing are used to provide incident response measures and metrics that are accurate;
- IR-03(03)(c)[03] qualitative data from testing are used to provide incident response measures and metrics that are consistent;
- IR-03(03)(c)[04] quantitative data from testing are used to provide incident response measures and metrics that are consistent;
- IR-03(03)(c)[05] qualitative data from testing are used to provide incident response measures and metrics in a reproducible format;
- IR-03(03)(c)[06] quantitative data from testing are used to provide incident response measures and metrics in a reproducible format.
Assessment Methods
Examine
- Incident response policy
- contingency planning policy
- procedures addressing incident response testing
- incident response testing documentation
- incident response plan
- business continuity plans
- contingency plans
- disaster recovery plans
- continuity of operations plans
- crisis communications plans
- critical infrastructure plans
- occupant emergency plans
- system security plan
- privacy plan
- other relevant documents or records
Interview
- Organizational personnel with incident response testing responsibilities
- organizational personnel with responsibilities for testing organizational plans related to incident response testing
- organizational personnel with information security and privacy responsibilities
Linked Issues
| Linktype | Issue |
|---|---|
| blocks | IR-03(03) Continuous Improvement |