CCI-002784

The organization defines components or elements of the organization across which an incident handling capability for insider threats will be coordinated.

Implementation Guidance

The organization being inspected/assessed defines and documents components or elements of the organization in which incident handling capability for insider threats will be coordinated. DoD has determined the components or elements are not appropriate to define at the Enterprise level.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented components or elements to ensure the organization being inspected/assessed defines components or elements of the organization in which incident handling capability for insider threats will be coordinated. DoD has determined the components or elements are not appropriate to define at the Enterprise level.

Compelling Evidence

1.) Documentation that defines components or elements of the organization in which incident handling capability for insider threats will be coordinated.

The controls below (if any) were marked by NIST as being related to CCI-002784.