Assessment Objective
Determine if:
- IR-04(03)[01] [Assignment: classes of incidents] are identified;
- IR-04(03)[02] [Assignment: actions] are taken in response to those incidents (defined in IR-04(03)_ODP[01]) to ensure the continuation of organizational mission and business functions.
Assessment Methods
Examine
- Incident response policy
- procedures addressing incident handling
- incident response plan
- privacy plan
- list of classes of incidents
- list of appropriate incident response actions
- system security plan
- other relevant documents or records
Interview
- Organizational personnel with incident handling responsibilities
- organizational personnel with information security responsibilities
Test
- Mechanisms that support and/or implement continuity of operations
Ticket collegati
| Tipo di collegamento | Ticket |
|---|---|
| blocks | IR-04(03) Continuity of Operations |