CCI-004118

Provide incident response training on how to identify and respond to a breach, including the organization's process for reporting a breach.

Implementation Guidance

Determine if: - incident response training on how to identify and respond to a breach is provided. - incident response training on the organization's process for reporting a breach is provided.

Validation Procedures

Examine: [SELECT FROM: Incident response policy; contingency planning policy; procedures addressing incident response testing; procedures addressing contingency plan testing; incident response testing material; incident response test results; incident response test plan; incident response plan; contingency plan; system security plan; privacy plan; other relevant documents or records]. Interview: [SELECT FROM: Organizational personnel with incident response training responsibilities; organizational personnel with information security and privacy responsibilities].

The controls below (if any) were marked by NIST as being related to CCI-004118.