CCI-000840

The organization employs automated mechanisms to increase the availability of incident response-related information and support.

Implementation Guidance

The organization being inspected/assessed will implement an automated intra-organization incident response information sharing capability to provide the following incident related information and support, for example: 1. SOP for incident reporting 2. Incident handling FAQ 3. Current incident activity awareness information 4. Incident response contact information 5. Incident report submission

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the incident response information sharing capability to validate the information sharing capability is available to organizational users.

Compelling Evidence

1.) Signed and dated Incident Response Plan, referencing automated mechanisms section

The controls below (if any) were marked by NIST as being related to CCI-000840.