CCI-002944

Initiate organization-defined response actions to organization-defined classes or types of intrusions, using organization-defined automated mechanisms.

Implementation Guidance

The organization being inspected/assessed implements automated mechanisms to initiate response actions defined in PE-6 (2), CCI 2945 to classes/types of intrusions defined in PE-6 (2), CCI 2943.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines hardware/software lists and/or any other documentation showing the use of automated intrusion detection systems to ensure the organization being inspected/assessed implements automated mechanisms to initiate response actions defined in PE-6 (2), CCI 2945 to classes/types of intrusions defined in PE-6 (2), CCI 2943.

Compelling Evidence

1.) Automated response plans in case of intrusion

The controls below (if any) were marked by NIST as being related to CCI-002944.