IR-9—Information Spillage Response
>Control Description
Respond to information spills by:
a. Assigning ⚙organization-defined personnel or roles with responsibility for responding to information spills;
b. Identifying the specific information involved in the system contamination;
c. Alerting ⚙organization-defined personnel or roles of the information spill using a method of communication not associated with the spill;
d. Isolating the contaminated system or system component;
e. Eradicating the information from the contaminated system or component;
f. Identifying other systems or system components that may have been subsequently contaminated; and
g. Performing the following additional actions: ⚙organization-defined actions.
>Related Controls
Ask AI
Configure your API key to use AI features.