Assessment Objective
Determine if:
- IR-03(02) incident response testing is coordinated with organizational elements responsible for related plans.
Assessment Methods
Examine
- Incident response policy
- contingency planning policy
- procedures addressing incident response testing
- incident response testing documentation
- incident response plan
- business continuity plans
- contingency plans
- disaster recovery plans
- continuity of operations plans
- crisis communications plans
- critical infrastructure plans
- occupant emergency plans
- system security plan
- privacy plan
- other relevant documents or records
Interview
- Organizational personnel with incident response testing responsibilities
- organizational personnel with responsibilities for testing organizational plans related to incident response testing
- organizational personnel with information security and privacy responsibilities
Gekoppelde issues
| Koppelingstype | Issue |
|---|---|
| blocks | IR-03(02) [H] Coordination with Related Plans |