Assessment Objective

Determine if:

• an integrated incident response team is established.
• an integrated incident response team is maintained.
• the integrated incident response team can be deployed to any location identified by the organization in [Assignment: time period].

Assessment Methods

Examine

• Incident response policy
• procedures addressing incident handling
• procedures addressing incident response planning
• incident response plan
• system security plan
• other relevant documents or records

Interview

• Personnel with incident handling responsibilities
• personnel with information security responsibilities
• members of the integrated incident response team

Ticket collegati

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final