CCI-004143

Establish and maintain an integrated incident response team that can be deployed to any location identified by the organization in an organization-defined time period.

Implementation Guidance

Determine if: - an integrated incident response team is established and maintained. - the integrated incident response team can be deployed to any location identified by the organization in [IR-04(11)_ODP; the time period within which an integrated incident response team can be deployed is defined].

Validation Procedures

Examine: [SELECT FROM: Incident response policy; procedures addressing incident handling; procedures addressing incident response planning; incident response plan; system security plan; privacy plan; other relevant documents or records]. Interview: [SELECT FROM: Organizational personnel with incident handling responsibilities; organizational personnel with information security and privacy responsibilities; members of the integrated incident response team].

The controls below (if any) were marked by NIST as being related to CCI-004143.