+IR-04(02) Dynamic Reconfiguration
|
IR-04(02) Dynamic Reconfiguration
Control
Include the following types of dynamic reconfiguration for [Assignement: system components] as part of the incident response capability: [Assignement: types of dynamic reconfiguration].
Discussion
Dynamic reconfiguration includes changes to router rules, access control lists, intrusion detection or prevention system parameters, and filter rules for guards or firewalls. Organizations may perform dynamic reconfiguration of systems to stop attacks, misdirect attackers, and isolate components of systems, thus limiting the extent of the damage from breaches or compromises. Organizations include specific time frames for achieving the reconfiguration of systems in the definition of the reconfiguration capability, considering the potential need for rapid response to effectively address cyber threats.
Assessment Objective
[Assignement: types of dynamic reconfiguration] for [Assignement: system components] are included as part of the incident response capability.
Assessment Method
Examine
Incident response policy
procedures addressing incident handling
mechanisms supporting incident handling
list of system components to be dynamically reconfigured as part of incident response capability
system design documentation
system configuration settings and associated documentation
system audit records
incident response plan
system security plan
other relevant documents or records
Interview
Organizational personnel with incident handling responsibilities
organizational personnel with information security responsibilities
1. Yleiskatsaus
1.1 Viittaukset
1.2 Tunnistetut vaatimukset
1.3 Liittyvät säädökset
2. Tunnistetut vaatimukset
Vaatimukset
| Lähde |
Vaatimus |
3. Liittyvät säädökset
Linkitetyt tehtävät
|