Assessment Objective
Determine if:
- IR-04(08) there is coordination with [Assignment: external organizations] to correlate and share [Assignment: incident information] to achieve a cross-organization perspective on incident awareness and more effective incident responses.
Assessment Methods
Examine
- Incident response policy
- procedures addressing incident handling
- list of external organizations
- records of incident handling coordination with external organizations
- incident response plan
- system security plan
- privacy plan
- other relevant documents or records
Interview
- Organizational personnel with incident handling responsibilities
- organizational personnel with information security and privacy responsibilities
- personnel from external organizations with whom incident response information is to be coordinated, shared, and correlated
Test
- Organizational processes for coordinating incident handling information with external organizations
Lingitud teemad
| Lingi tüüp | Teema |
|---|---|
| blocks | IR-04(08) Correlation with External Organizations |