CCI-000988

Provide a means for employees to communicate with information security personnel in case of incidents.

Implementation Guidance

Determine if a means for employees to communicate with information security and privacy personnel in case of incidents is provided.

Validation Procedures

Examine: [SELECT FROM: Physical and environmental protection policy; procedures addressing alternate work sites for organizational personnel; list of security controls required for alternate work sites; assessments of security controls at alternate work sites; system security plan; privacy plan; other relevant documents or records]. Interview: [SELECT FROM: Organizational personnel approving the use of alternate work sites; organizational personnel using alternate work sites; organizational personnel assessing controls at alternate work sites; organizational personnel with information security and privacy responsibilities]. Test: [SELECT FROM: Organizational processes for security and privacy at alternate work sites; mechanisms supporting alternate work sites; security and privacy controls employed at alternate work sites; means of communication between personnel at alternate work sites and security and privacy personnel].

The controls below (if any) were marked by NIST as being related to CCI-000988.