CCI-000839

Provide an incident response support resource, integral to the organizational incident response capability, that offers advice and assistance to users of the system for the handling and reporting of incidents.

Implementation Guidance

Determine if: - an incident response support resource, integral to the Organizational incident response capability, is provided. - the incident response support resource offers advice and assistance to users of the system for the response and reporting of incidents.

Validation Procedures

Examine: [SELECT FROM: Incident response policy; procedures addressing incident response assistance; incident response plan; system security plan; privacy plan; other relevant documents or records]. Interview: [SELECT FROM: Organizational personnel with incident response assistance and support responsibilities; organizational personnel with access to incident response support and assistance capability; organizational personnel with information security and privacy responsibilities]. Test: [SELECT FROM: Organizational processes for incident response assistance; mechanisms supporting and/or implementing incident response assistance].

The controls below (if any) were marked by NIST as being related to CCI-000839.