IR-03—Incident Response
>Control Description
Confirmed incidents are assigned a priority level and managed to resolution. If applicable, Organization coordinates the incident response with business contingency activities.
Theme
Process
Type
Preventive
Policy/Standard
Incident Management Policy>Implementation Guidance
1. Prepare, document, and communicate the Security Incident Management Policy within the organization. 2. Ensure that priority level are assigned to a sample of incidents and that they are tracked to resolution. 3. For any crisis declared incidents, validate that business contingency activities are performed.
>Testing Procedure
1. Inspect the Organization Security Incident Management Policy. 2. Validate that priority level are assigned to a sample of incidents and ensure that they are tracked to resolution. 3. Validate that for any crisis declared incidents, that business contingency activities were performed.
>Audit Artifacts
E-IR-02
E-IR-06
>Framework Mappings
Cross-framework mappings provided by Adobe CCF Open Source under Creative Commons License.
Ask AI
Configure your API key to use AI features.