CCI-004150

Implementation Guidance

Determine if measures are employed to repair the reputation of the organization.

Validation Procedures

Examine: [SELECT FROM: Incident response policy; procedures addressing incident response; procedures addressing incident handling; incident response plan; system security plan; other relevant documents or records]. Interview: [SELECT FROM: Organizational personnel with incident handling responsibilities; organizational personnel with information security responsibilities; organizational personnel with communications or public relations responsibilities].