IR-9(2)—Training
>Control Description
Provide information spillage response training [Assignment: organization-defined frequency].
>Supplemental Guidance
Organizations establish requirements for responding to information spillage incidents in incident response plans. Incident response training on a regular basis helps to ensure that organizational personnel understand their individual responsibilities and what specific actions to take when spillage incidents occur.