CCI-001624

Implementation Guidance

The organization being inspected/assessed will document the results of incident response tests.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines: 1. the organization's incident response plan to identify organization's testing schedule and, 2. results of previous incident response tests to ensure the organization is documenting the results IAW their incident response plan.

Compelling Evidence

1.) Signed and dated Incident Response Test and/or after action reports