Navigate

CCI-000811

CCI-000811 Definition

The organization reviews and updates the current incident response procedures in accordance with organization-defined frequency.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

DoD (in conjunction with Joint Staff for CJCSIs) reviews and updates current incident response procedures (CJCSI 6510.01F, CJCSM 6510.01B, DoDD O-8530.1, and DoDI O-8530.2) annually. DoD Components are automatically compliant with this CCI because they are covered at the DoD level with the following policies: CJCSI 6510.01F, CJCSM 6510.01B, DoDD O-8530.1, and DoDI O-8530.2. DoD has defined the frequency as reviewed annually - updated as appropriate.

Validation Procedures

CJCSI 6510.01F "Information Assurance and Support to Computer Network Defense," CJCSM 6510.01B, "Cyber Incident Handling Program," DoDD O-8530.1, and DoDI O-8530.2 meet the DoD requirements for incident response policy and procedures. DoD Components are automatically compliant with this CCI because they are covered at the DoD level with the following policies: CJCSI 6510.01F, CJCSM 6510.01B, DoDD O-8530.1, and DoDI O-8530.2. DoD has defined the frequency as reviewed annually - updated as appropriate.

Compelling Evidence

Automatically compliant per CJCSI 6510.01F, CJCSM 6510.01B, DoDD O-8530.1, and DoDI O-8530.2

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-000811.

Control	Description
IR-1	The organization: IR-1a.: Develops, documents, and disseminates to [Assignment: organization-defined personnel or roles]: IR-1a.1.: An incident response policy that addresses purpose, scope, roles, responsibilities, management commitment, coordination among organizational entities, and compliance; and IR-1a.2.: Procedures to facilitate the implementation of the incident response policy and associated incident response controls; and IR-1b.: Reviews and updates the current: IR-1b.1.: Incident response policy [Assignment: organization-defined frequency]; and IR-1b.2.: Incident response procedures [Assignment: organization-defined frequency].

Control

Description

IR-1

The organization:

IR-1a.: Develops, documents, and disseminates to [Assignment: organization-defined personnel or roles]:
- IR-1a.1.: An incident response policy that addresses purpose, scope, roles, responsibilities, management commitment, coordination among organizational entities, and compliance; and
- IR-1a.2.: Procedures to facilitate the implementation of the incident response policy and associated incident response controls; and

IR-1b.: Reviews and updates the current:
- IR-1b.1.: Incident response policy [Assignment: organization-defined frequency]; and
- IR-1b.2.: Incident response procedures [Assignment: organization-defined frequency].