Assessment Objective
Determine if:
- IR-09a. [Assignment: personnel or roles] is/are assigned the responsibility to respond to information spills;
- IR-09b. the specific information involved in the system contamination is identified in response to information spills;
- IR-09c. [Assignment: personnel or roles] is/are alerted of the information spill using a method of communication not associated with the spill;
- IR-09d. the contaminated system or system component is isolated in response to information spills;
- IR-09e. the information is eradicated from the contaminated system or component in response to information spills;
- IR-09f. other systems or system components that may have been subsequently contaminated are identified in response to information spills;
- IR-09g. [Assignment: actions] are performed in response to information spills.
Assessment Methods
Examine
- Incident response policy
- procedures addressing information spillage
- incident response plan
- system security plan
- records of information spillage alerts/notifications
- list of personnel who should receive alerts of information spillage
- list of actions to be performed regarding information spillage
- other relevant documents or records
Interview
- Organizational personnel with incident response responsibilities
- organizational personnel with information security responsibilities
Test
- Organizational processes for information spillage response
- mechanisms supporting and/or implementing information spillage response actions and related communications
Tichete legate
| Tip de legătură | Tichet |
|---|---|
| blocks | IR-09 Information Spillage Response |