CCI-000941

Coordinate results of reviews and investigations with the organization's incident response capability.

Implementation Guidance

The organization being inspected/assessed will coordinate the results of reviews and investigations of physical security incidents with the organization's incident response capability (for physical security incidents).

Validation Procedures

The organization conducting the inspection/assessment obtains and examines documentation of physical security incidents to ensure coordination with the inspected organization's incident response capability occurred.

Compelling Evidence

1.) AAR of last incident (or emails of coordination) 2.) IRP/procedure for physical incidents

The controls below (if any) were marked by NIST as being related to CCI-000941.