CCI-002783

The organization coordinates an incident handling capability for insider threats across organization-defined components or elements of the organization.

Implementation Guidance

The organization being inspected/assessed documents within their incident response plan, the responsibilities of each element of the organization defined in IR-4 (7), CCI 2784.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the incident response plan to ensure the organization being inspected/assessed coordinates incident handling capability for insider threats across components or elements of the organization defined in IR-4 (7), CCI 2784.

Compelling Evidence

1.) Signed and dated Incident Response Plan, referencing incident handling capability for insider threats section

The controls below (if any) were marked by NIST as being related to CCI-002783.