CCI-002639

Incorporate the results from malicious code analysis into organizational incident response processes.

Implementation Guidance

The organization being inspected/assessed incorporates the results from malicious code analysis into organizational incident response processes.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the organizational incident response processes to ensure the organization being inspected/assessed incorporates the results from malicious code analysis into organizational incident response processes.

Compelling Evidence

1.) Signed and dated system security plan. 2.) Incident response processes that incorporate the results from malicious code analysis into organizational incident response processes.

The controls below (if any) were marked by NIST as being related to CCI-002639.