Assessment Objective
Determine if:
- IR-03(01) the incident response capability is tested using [Assignment: automated mechanisms].
Assessment Methods
Examine
- Incident response policy
- contingency planning policy
- procedures addressing incident response testing
- procedures addressing contingency plan testing
- incident response testing documentation
- incident response test results
- incident response test plan
- incident response plan
- contingency plan
- system security plan
- automated mechanisms supporting incident response tests
- other relevant documents or records
Interview
- Organizational personnel with incident response testing responsibilities
- organizational personnel with information security responsibilities
Test
- Automated mechanisms that more thoroughly and effectively test the incident response capability
Incidencias vinculadas
| Tipo de vínculo | Incidencia |
|---|---|
| blocks | IR-03(01) Automated Testing |