CCI-000841

Establish a direct, cooperative relationship between its incident response capability and external providers of system protection capability.

Implementation Guidance

Determine if a direct, cooperative relationship is established between its incident response capability and external providers of the system protection capability.

Validation Procedures

Examine: [SELECT FROM: Incident response policy; procedures addressing incident response assistance; incident response plan; system security plan; privacy plan; other relevant documents or records]. Interview: [SELECT FROM: Organizational personnel with incident response support and assistance responsibilities; external providers of system protection capability; organizational personnel with information security and privacy responsibilities].

The controls below (if any) were marked by NIST as being related to CCI-000841.