CCI-000841

The organization establishes a direct, cooperative relationship between its incident response capability and external providers of information system protection capability.

Implementation Guidance

The organization being inspected/assessed must establish a formal agreement with a computer network defense service provider (CNDSP).

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the formal agreement document between the organization and CNDSP to validate it is current and valid.

Compelling Evidence

1.) Signed and dated formal agreement between its incident response capability and a computer network defense service provider (CNDSP).

The controls below (if any) were marked by NIST as being related to CCI-000841.