Assessment Objective
Determine if:
- an integrated incident response team is established.
- an integrated incident response team is maintained.
- the integrated incident response team can be deployed to any location identified by the organization in [Assignment: time period].
Assessment Methods
Examine
- Incident response policy
- procedures addressing incident handling
- procedures addressing incident response planning
- incident response plan
- system security plan
- other relevant documents or records
Interview
- Personnel with incident handling responsibilities
- personnel with information security responsibilities
- members of the integrated incident response team
Linkitetyt tehtävät
| Linkin tyyppi | Tehtävä |
|---|---|
| blocks | 03.06.02E Integrated Incident Response Team |