Assessment Objectives
In addition to relevant policies, standards and procedures, the assessor shall examine, interview, and/or test to determine if appropriately scoped evidence exists to support the claim that:
- IRO-16_A01 the time period to report suspected incidents to the organizational incident response capability is defined.
Assessment rigor: 1
Origin: 53A_R5_IR-06_ODP[01] 171A_R3_A.03.06.02.ODP[01] - IRO-16_A02 authorities to whom incident information is to be reported are defined.
Assessment rigor: 1
Origin: 53A_R5_IR-06_ODP[02] - IRO-16_A03 personnel are required to report suspected incidents to the organizational incident response capability within an organization-defined time period.
Defined parameters: without delay
Assessment rigor: 1
Origin: 53A_R5_IR-06a. - IRO-16_A04 incident information is reported to organization-defined authorities.
Assessment rigor: 1
Origin: 53A_R5_IR-06b. - IRO-16_A05 suspected incidents are reported to the organizational incident response capability within an organization-defined time period.
Defined parameters: no more than 24 hours after discovery
Assessment rigor: 1
Origin: SCF Created - IRO-16_A06 an incident response support resource that offers advice and assistance to system users on handling and reporting incidents is provided.
Assessment rigor: 2
Origin: 171A_R3_A.03.06.02.d - IRO-16_A07 suspected incidents are reported to the organizational incident response capability within <A.03.06.02.ODP[01]: time period>.
Defined parameters: near real time or as soon as practicable upon discovery
Assessment rigor: NIST 800-171
Origin: 171A_R3_A.03.06.02.b - IRO-16_A08 incident information is reported to <A.03.06.02.ODP[02]: authorities>.
Defined parameters: all applicable personnel and entities as specified by the contract, and in accordance with any incident response plan notification procedures
Assessment rigor: NIST 800-171
Origin: 171A_R3_A.03.06.02.c
Saincheisteanna nasctha
| Cineál naisc | Saincheist |
|---|---|
| blocks | Incident Stakeholder Reporting |
- Secure Controls Framework -
EN: GRCA includes the Secure Controls Framework® (SCF) content, © Secure Controls Framework Council, LLC, used under the Creative Commons Attribution-NoDerivatives 4.0 International Public License. SCF control numbers, names, descriptions and mappings appear exactly as published by the SCF Council – https://securecontrolsframework.com. GRCA may group or reorder SCF content for display, which does not change SCF content; the mappings are shown as links to the frameworks they name. Learn more at https://securecontrolsframework.com.
DE: GRCA enthält Inhalte des Secure Controls Framework® (SCF), © Secure Controls Framework Council, LLC, genutzt unter der Creative Commons Attribution-NoDerivatives 4.0 International Public License. Nummern, Namen, Beschreibungen und Zuordnungen der SCF-Controls erscheinen genau so, wie der SCF Council sie veröffentlicht – https://securecontrolsframework.com. GRCA gruppiert oder sortiert SCF-Inhalte für die Anzeige, ohne sie zu verändern; die Zuordnungen erscheinen als Verknüpfungen zu den genannten Regelwerken. Mehr unter https://securecontrolsframework.com.