CCI-002945

The organization defines response actions to initiate when organization-defined classes/types of intrusions are recognized.

Implementation Guidance

The organization being inspected/assessed defines and documents response actions to initiate when organization-defined classes/types of intrusions are recognized. DoD has determined the response actions are not appropriate to define at the Enterprise level.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented response actions to ensure the organization being inspected/assessed defines response actions to initiate when organization-defined classes/types of intrusions are recognized. DoD has determined the response actions are not appropriate to define at the Enterprise level.

Compelling Evidence

1.) Documentation defining response actions to initiate when organization-defined classes/types of intrusions are recognized

The controls below (if any) were marked by NIST as being related to CCI-002945.