CCI-005153

CCI-005153 Definition

Defines events that require the review and update of incident response training content.

Status
Type	CheckType.policy

The controls below (if any) were marked by NIST as being related to CCI-005153.

Control	Description
IR-2	a: Provide incident response training to system users consistent with assigned roles and responsibilities: 1: Within [a time period within which incident response training is to be provided to system users assuming an incident response role or responsibility is defined;] of assuming an incident response role or responsibility or acquiring system access; 2: When required by system changes; and 3: [frequency at which to provide incident response training to users is defined;] thereafter; and b: Review and update incident response training content [frequency at which to review and update incident response training content is defined;] and following [events that initiate a review of the incident response training content are defined;].

Control

Description

a: Provide incident response training to system users consistent with assigned roles and responsibilities:
- 1: Within [a time period within which incident response training is to be provided to system users assuming an incident response role or responsibility is defined;] of assuming an incident response role or responsibility or acquiring system access;
- 2: When required by system changes; and
- 3: [frequency at which to provide incident response training to users is defined;] thereafter; and

b: Review and update incident response training content [frequency at which to review and update incident response training content is defined;] and following [events that initiate a review of the incident response training content are defined;].