CCI-002779

The organization provides incident response training to information system users consistent with assigned roles and responsibilities when required by information system changes.

Implementation Guidance

The organization being inspected/assessed documents and implements a process to provide incident response training to information system users, other than general users, consistent with assigned roles and responsibilities when required by information system changes. For general users, DoD components are automatically compliant with the requirement based on DoDD 8570.01 requirements for IA awareness training. The organization must maintain a record of training.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented process as well as training records for a sampling of information system users to ensure the organization being inspected/assessed provides incident response training to information system users, other than general users, consistent with assigned roles and responsibilities when required by information system changes. For general users, DoD components are automatically compliant with the requirement based on DoDD 8570.01 requirements for IA awareness training.

Compelling Evidence

1.) Automatically compliant for general users 2.) Document with process and training records for other than general users, consistent with assigned roles and responsibilities.

The controls below (if any) were marked by NIST as being related to CCI-002779.