CCI-002801

Develop an incident response plan that defines the resources and management support needed to effectively maintain and mature an incident response capability.

Implementation Guidance

The organization being inspected/assessed defines and documents within their incident response plan, the resources and management support needed to effectively maintain and mature an incident response capability.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the incident response plan to ensure the organization being inspected/assessed defines within their plan, the resources and management support needed to effectively maintain and mature an incident response capability.

Compelling Evidence

1.) Signed and dated Incident Response Plan, referencing resources and management section

The controls below (if any) were marked by NIST as being related to CCI-002801.