Assessment Objective
Determine if:
- IR-07[01] an incident response support resource, integral to the organizational incident response capability, is provided;
- IR-07[02] the incident response support resource offers advice and assistance to users of the system for the response and reporting of incidents.
Assessment Methods
Examine
- Incident response policy
- procedures addressing incident response assistance
- incident response plan
- system security plan
- privacy plan
- other relevant documents or records
Interview
- Organizational personnel with incident response assistance and support responsibilities
- organizational personnel with access to incident response support and assistance capability
- organizational personnel with information security and privacy responsibilities
Test
- Organizational processes for incident response assistance
- mechanisms supporting and/or implementing incident response assistance
Ticket collegati
| Tipo di collegamento | Ticket |
|---|---|
| blocks | IR-07 [P] Incident Response Assistance |