CCI-000842

The organization identifies organizational incident response team members to the external providers.

Implementation Guidance

The organization being inspected/assessed must provide and update the list of internal incident response team members as necessary throughout the lifecycle of the CNDSP agreement, in conjunction with the CNDSP agreement.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the list of internal incident response team members to validate it is accurate and current. Interviews with CNDSP personnel and organizational incident response team members may also be conducted.

Compelling Evidence

1.) Signed and dated Incident Response Plan, referencing organizational incident response team members section

The controls below (if any) were marked by NIST as being related to CCI-000842.