Assessment Objective
Determine if:
- IR-09(03) [Assignment: procedures] are implemented to ensure that organizational personnel impacted by information spills can continue to carry out assigned tasks while contaminated systems are undergoing corrective actions.
Assessment Methods
Examine
- Incident response policy
- procedures addressing incident response
- procedures addressing information spillage
- incident response plan
- system security plan
- other relevant documents or records
Interview
- Organizational personnel with incident response responsibilities
- organizational personnel with information security responsibilities
Test
- Organizational processes for post-spill operations
Pedidos ligados
| Tipo de ligação | Pedido |
|---|---|
| blocks | IR-09(03) Post-spill Operations |