|
+IR-03 [P] Incident Response Testing |
IR-03 [P] Incident Response TestingControlTest the effectiveness of the incident response capability for the system [Assignement: frequency] using the following tests: [Assignement: tests].DiscussionOrganizations test incident response capabilities to determine their effectiveness and identify potential weaknesses or deficiencies. Incident response testing includes the use of checklists, walk-through or tabletop exercises, and simulations (parallel or full interrupt). Incident response testing can include a determination of the effects on organizational operations and assets and individuals due to incident response. The use of qualitative and quantitative data aids in determining the effectiveness of incident response processes.Assessment Objectivethe effectiveness of the incident response capability for the system is tested [Assignement: frequency] using [Assignement: tests].Assessment MethodExamineIncident response policy contingency planning policy procedures addressing incident response testing procedures addressing contingency plan testing incident response testing material incident response test results incident response test plan incident response plan contingency plan system security plan privacy plan other relevant documents or recordsInterviewOrganizational personnel with incident response testing responsibilities organizational personnel with information security and privacy responsibilities1. Översikt
1.1 Referenser1.2 Identifierade krav1.3 Relaterade regleringar2. Identifierade krav
3. Relaterade regleringar
Länkade ärenden |