CCI-000941
CCI-000941 Definition
The organization coordinates results of reviews and investigations with the organization^s incident response capability.
Status | |
Type | CheckType.policy |
Master Assessment Datasheet
Implementation Guidance
The organization being inspected/assessed will coordinate the results of reviews and investigations of physical security incidents with the organization's incident response capability (for physical security incidents).
Validation Procedures
The organization conducting the inspection/assessment obtains and examines documentation of physical security incidents to ensure coordination with the inspected organization's incident response capability occurred.
Compelling Evidence
1.) AAR of last incident (or emails of coordination) 2.) IRP/procedure for physical incidents