CCI-002795

Develop an incident response plan that provides the organization with a roadmap for implementing its incident response capability.

Implementation Guidance

The organization being inspected/assessed defines and documents within their incident response plan, a roadmap for implementing its incident response capability.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the incident response plan to ensure the organization being inspected/assessed provides within their plan, a roadmap for implementing its incident response capability.

Compelling Evidence

1.) Signed and dated Incident Response Plan, referencing flow chart section

The controls below (if any) were marked by NIST as being related to CCI-002795.