CCI-000817

Provide an incident response training environment using organization-defined automated mechanisms.

Implementation Guidance

The organization being inspected/assessed employs an automated mechanism such as scenario-based interactive online training/CBT providing a realistic incident response training environment.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the automated mechanism such as scenario-based interactive online training/CBT to verify that it provides a realistic incident response training environment.

Compelling Evidence

1.) Signed and dated Incident Response Training documentation, referencing simulated events requirements section

The controls below (if any) were marked by NIST as being related to CCI-000817.