IR-2—Incident Response Training
>Control Description
a
Provide incident response training to system users consistent with assigned roles and responsibilities:
1.
Within ⚙organization-defined time period of assuming an incident response role or responsibility or acquiring system access;
2.
When required by system changes; and
3.
⚙organization-defined frequency thereafter; and
b
Review and update incident response training content ⚙organization-defined frequency and following ⚙organization-defined events.
>Related Controls
Ask AI
Configure your API key to use AI features.