Assessment Objective

Determine if:

• IR-09(02) information spillage response training is provided [Assignment: frequency].

Assessment Methods

Examine

• Incident response policy
• procedures addressing information spillage response training
• information spillage response training curriculum
• information spillage response training materials
• incident response plan
• system security plan
• information spillage response training records
• other relevant documents or records

Interview

• Organizational personnel with incident response training responsibilities
• organizational personnel with information security responsibilities

Kapcsolt feladatok

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final