CCI-000988

Provide a means for employees to communicate with information security personnel in case of incidents.

Implementation Guidance

The organization being inspected/assessed must disseminate current contact information for appropriate security personnel to all employees; for example, telephone or e-mail.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines contact information for appropriate security personnel to ensure its accuracy and dissemination.

Compelling Evidence

1.) Contact list for appropriate security personnel

The controls below (if any) were marked by NIST as being related to CCI-000988.