CCI-005151

CCI-005151 Definition

Review and update incident response training content at an organization-defined frequency and following organization-defined events.

Status
Type	CheckType.policy

The controls below (if any) were marked by NIST as being related to CCI-005151.

Control	Description
IR-2	a: Provide incident response training to system users consistent with assigned roles and responsibilities: 1: Within [a time period within which incident response training is to be provided to system users assuming an incident response role or responsibility is defined;] of assuming an incident response role or responsibility or acquiring system access; 2: When required by system changes; and 3: [frequency at which to provide incident response training to users is defined;] thereafter; and b: Review and update incident response training content [frequency at which to review and update incident response training content is defined;] and following [events that initiate a review of the incident response training content are defined;].

Control

Description

a: Provide incident response training to system users consistent with assigned roles and responsibilities:
- 1: Within [a time period within which incident response training is to be provided to system users assuming an incident response role or responsibility is defined;] of assuming an incident response role or responsibility or acquiring system access;
- 2: When required by system changes; and
- 3: [frequency at which to provide incident response training to users is defined;] thereafter; and

b: Review and update incident response training content [frequency at which to review and update incident response training content is defined;] and following [events that initiate a review of the incident response training content are defined;].