Assessment Objective

Determine if:

• IR-07(02)(a) a direct, cooperative relationship is established between its incident response capability and external providers of the system protection capability;
• IR-07(02)(b) organizational incident response team members are identified to the external providers.

Assessment Methods

Examine

• Incident response policy
• procedures addressing incident response assistance
• incident response plan
• system security plan
• privacy plan
• other relevant documents or records

Interview

• Organizational personnel with incident response support and assistance responsibilities
• external providers of system protection capability
• organizational personnel with information security and privacy responsibilities

Tichete legate

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final