CCI-000816

Incorporate simulated events into incident response training to facilitate effective response by personnel in crisis situations.

Implementation Guidance

Determine if simulated events are incorporated into incident response training to facilitate the required response by personnel in crisis situations.

Validation Procedures

Examine: [SELECT FROM: Incident response policy; procedures addressing incident response training; incident response training curriculum; incident response training materials; incident response plan; system security plan; privacy plan; other relevant documents or records]. Interview: [SELECT FROM: Organizational personnel with incident response training and operational responsibilities; organizational personnel with information security and privacy responsibilities]. Test: [SELECT FROM: Mechanisms that support and/or implement simulated events for incident response training].

The controls below (if any) were marked by NIST as being related to CCI-000816.