CCI-000988

The organization provides a means for employees to communicate with information security personnel in case of security incidents or problems.

Implementation Guidance

The organization being inspected/assessed must disseminate current contact information for appropriate security personnel to all employees; for example, telephone or e-mail.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines contact information for appropriate security personnel to ensure its accuracy and dissemination.

Compelling Evidence

1.) Contact list for appropriate security personnel

The controls below (if any) were marked by NIST as being related to CCI-000988.