CCI-002797

Develop an incident response plan that provides a high-level approach for how the incident response capability fits into the overall organization.

Implementation Guidance

The organization being inspected/assessed defines and documents within their incident response plan, a high-level approach for how the incident response capability fits into the overall organization.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the incident response plan to ensure the organization being inspected/assessed provides within their plan, a high-level approach for how the incident response capability fits into the overall organization.

Compelling Evidence

1.) Signed and dated Incident Response Plan, referencing flow chart or data flow section

The controls below (if any) were marked by NIST as being related to CCI-002797.