CCI-000816

Incorporate simulated events into incident response training to facilitate effective response by personnel in crisis situations.

Implementation Guidance

The organization being inspected/assessed will document a process to include simulated events into incident response training to facilitate effective response by personnel in crisis situations. The process to include simulated events shall be documented IAW CJCSI 6510.01F, CJCSM 6510.01B, DoDD O-8530.1, and DoDI O-8530.2. The organization must maintain a record of incident response training to include simulated events.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines incident response training materials and a record of training events to ensure that simulated events have been included.

Compelling Evidence

1.) Signed and dated Incident Response Training documentation, referencing simulated events requirements section

The controls below (if any) were marked by NIST as being related to CCI-000816.